Re: [PATCH] Fix x509_key_preparse() not to reject keys outside their validity time range

2013-03-19 Thread Alexander Holler
Am 14.03.2013 13:24, schrieb David Woodhouse: The x509_key_preparse() function will refuse to even *parse* a certificate when the system clock happens to be set to a time before the ValidFrom or after the ValidTo date. This is wrong. If date checks are to be done, they need to be done at the tim

[PATCH] Fix x509_key_preparse() not to reject keys outside their validity time range

2013-03-14 Thread David Woodhouse
The x509_key_preparse() function will refuse to even *parse* a certificate when the system clock happens to be set to a time before the ValidFrom or after the ValidTo date. This is wrong. If date checks are to be done, they need to be done at the time the cert is *used*. It should be perfectly pos