| commit | 17da9dd82931abdf054a01c466bce45e7d12b742 | [log] [tgz] |
|---|---|---|
| author | Janos Follath <janos.follath@arm.com> | Mon Sep 19 09:35:18 2016 +0100 |
| committer | Janos Follath <janos.follath@arm.com> | Fri Sep 30 09:04:18 2016 +0100 |
| tree | 2ba1f0c12a957a9d0bb89420047906dbdf3476a9 | |
| parent | 2d01f2d4c50cac7ba257ef2af791d97e9697c01c [diff] |
Add option for relaxed X509 time verification. The certificates are not valid according to the RFC, but are in wide distribution across the internet. Hence the request to add a compile-time flag to accept these certificates if wanted by the application. If POLARSSL_RELAXED_X509_DATE is enabled it will allow dates without seconds, and allow dates with timezones (but doesn't actually use the timezone). Patch provided by OpenVPN.