mbedtls/ChangeLog.d
Raoul Strackx 75475d8465 Always revoke certificate on CRL
RFC5280 does not state that the `revocationDate` should be checked.

In addition, when no time source is available (i.e., when MBEDTLS_HAVE_TIME_DATE is not defined), `mbedtls_x509_time_is_past` always returns 0. This results in the CRL not being checked at all.

https://tools.ietf.org/html/rfc5280
Signed-off-by: Raoul Strackx <raoul.strackx@fortanix.com>
2020-08-26 11:42:52 +02:00
..
00README.md Copy the changelog entry assembling script from development 2020-04-21 18:34:06 +02:00
bugfix_PR_2632.txt Adapt ChangeLog 2020-07-10 18:00:25 +00:00
copyright.txt Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
crl-revocationDate.txt Always revoke certificate on CRL 2020-08-26 11:42:52 +02:00
e2k-support.txt Backport e2k support to mbedtls-2.7 2020-08-23 00:39:15 +03:00
fix-build-netbsd.txt Fix building on NetBSD 9.0 2020-08-17 07:31:06 +02:00
netbsd-rand-arc4random_buf.txt Log change as bugfix 2020-08-13 06:46:57 +02:00
stdout-macro.txt Fix bug in redirection of unit test outputs 2020-08-23 22:38:51 +02:00
x509write_csr_heap_alloc.txt Classify #3464 ChangeLog entry as Bugfix 2020-07-18 01:14:00 +00:00