tree b090d395aa8be2d56cb6282fefeb76607615201d
parent c60c30eb68dd70c71f902f55eb0db69b466e7503
author Raoul Strackx <raoul.strackx@fortanix.com> 1592233393 +0200
committer Raoul Strackx <raoul.strackx@fortanix.com> 1597647903 +0200

Always revoke certificate on CRL

RFC5280 does not state that the `revocationDate` should be checked.

In addition, when no time source is available (i.e., when MBEDTLS_HAVE_TIME_DATE is not defined), `mbedtls_x509_time_is_past` always returns 0. This results in the CRL not being checked at all.

https://tools.ietf.org/html/rfc5280
Signed-off-by: Raoul Strackx <raoul.strackx@fortanix.com>