Raoul Strackx 75475d8465 Always revoke certificate on CRL ...

RFC5280 does not state that the `revocationDate` should be checked.

In addition, when no time source is available (i.e., when MBEDTLS_HAVE_TIME_DATE is not defined), `mbedtls_x509_time_is_past` always returns 0. This results in the CRL not being checked at all.

https://tools.ietf.org/html/rfc5280
Signed-off-by: Raoul Strackx <raoul.strackx@fortanix.com>

2020-08-26 11:42:52 +02:00

..

00README.md

Copy the changelog entry assembling script from development

2020-04-21 18:34:06 +02:00

bugfix_PR_2632.txt

Adapt ChangeLog

2020-07-10 18:00:25 +00:00

copyright.txt

Update copyright notices to use Linux Foundation guidance

2020-08-19 16:37:36 +02:00

crl-revocationDate.txt

Always revoke certificate on CRL

2020-08-26 11:42:52 +02:00

e2k-support.txt

Backport e2k support to mbedtls-2.7

2020-08-23 00:39:15 +03:00

fix-build-netbsd.txt

Fix building on NetBSD 9.0

2020-08-17 07:31:06 +02:00

netbsd-rand-arc4random_buf.txt

Log change as bugfix

2020-08-13 06:46:57 +02:00

stdout-macro.txt

Fix bug in redirection of unit test outputs

2020-08-23 22:38:51 +02:00

x509write_csr_heap_alloc.txt

Classify #3464 ChangeLog entry as Bugfix

2020-07-18 01:14:00 +00:00