tree 2ba1f0c12a957a9d0bb89420047906dbdf3476a9
parent 2d01f2d4c50cac7ba257ef2af791d97e9697c01c
author Janos Follath <janos.follath@arm.com> 1474274118 +0100
committer Janos Follath <janos.follath@arm.com> 1475222658 +0100

Add option for relaxed X509 time verification.

The certificates are not valid according to the RFC, but are in wide
distribution across the internet. Hence the request to add a
compile-time flag to accept these certificates if wanted by the
application.

If POLARSSL_RELAXED_X509_DATE is enabled it will allow dates without
seconds, and allow dates with timezones (but doesn't actually use
the timezone).

Patch provided by OpenVPN.