mbedtls/ChangeLog.d
Raoul Strackx 2a8e9587a7 Always revoke certificate on CRL
RFC5280 does not state that the `revocationDate` should be checked.

In addition, when no time source is available (i.e., when MBEDTLS_HAVE_TIME_DATE is not defined), `mbedtls_x509_time_is_past` always returns 0. This results in the CRL not being checked at all.

https://tools.ietf.org/html/rfc5280
Signed-off-by: Raoul Strackx <raoul.strackx@fortanix.com>
2020-08-26 11:38:41 +02:00
..
00README.md Copy the changelog entry assembling script from development 2020-04-21 18:36:17 +02:00
copyright.txt Update copyright notices to use Linux Foundation guidance 2020-08-19 16:54:51 +02:00
crl-revocationDate.txt Always revoke certificate on CRL 2020-08-26 11:38:41 +02:00
e2k-support.txt Backport e2k support to mbedtls-2.7 2020-08-23 00:28:45 +03:00
fix-build-netbsd.txt Fix building on NetBSD 9.0 2020-08-17 07:14:16 +02:00
netbsd-rand-arc4random_buf.txt Log change as bugfix 2020-08-13 06:26:41 +02:00
stdout-macro.txt Fix bug in redirection of unit test outputs 2020-08-23 22:35:19 +02:00