mirror of
https://github.com/yuzu-mirror/mbedtls.git
synced 2026-01-07 09:10:42 +01:00
RFC5280 does not state that the `revocationDate` should be checked. In addition, when no time source is available (i.e., when MBEDTLS_HAVE_TIME_DATE is not defined), `mbedtls_x509_time_is_past` always returns 0. This results in the CRL not being checked at all. https://tools.ietf.org/html/rfc5280 Signed-off-by: Raoul Strackx <raoul.strackx@fortanix.com> |
||
|---|---|---|
| .. | ||
| 00README.md | ||
| bugfix_PR3452.txt | ||
| build_with_only_montgomery_curves.txt | ||
| cmake-install.txt | ||
| crl-revocationDate.txt | ||
| do_not_persist_volatile_external_keys.txt | ||
| format-signedness.txt | ||
| netbsd-rand-arc4random_buf.txt | ||
| psa_curve25519_key_support.txt | ||
| psa_curve25519_public_key_import.txt | ||
| psa_ecc_dh_macros.txt | ||
| x509-verify-non-dns-san.txt | ||
| x509write_csr_heap_alloc.txt | ||