summaryrefslogtreecommitdiff
path: root/patches/source/gnutls/gnutls-2.8.4_fix-expired-cert.diff
blob: cb0a8d567056f947d4f96ca05a35e4645eaeef62 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
commit 45c1fd2912e1680e7aafda931a6acdf97c8f3c00
Author: Simon Josefsson <simon@josefsson.org>
Date:   Tue Oct 20 11:27:13 2009 +0200

    Fix expired cert.

diff --git a/tests/chainverify.c b/tests/chainverify.c
index 745cd7c..0192da2 100644
--- a/tests/chainverify.c
+++ b/tests/chainverify.c
@@ -701,8 +701,11 @@ static struct
   { "rsa-md5 not ok", mayfirst_chain, &mayfirst_chain[1],
     GNUTLS_VERIFY_ALLOW_SIGN_RSA_MD2,
     GNUTLS_CERT_INSECURE_ALGORITHM | GNUTLS_CERT_INVALID },
+  { "rsa-md5 not ok2", mayfirst_chain, &mayfirst_chain[1],
+    GNUTLS_VERIFY_ALLOW_SIGN_RSA_MD5,
+    GNUTLS_CERT_EXPIRED | GNUTLS_CERT_INVALID },
   { "rsa-md5 ok", mayfirst_chain, &mayfirst_chain[1],
-    GNUTLS_VERIFY_ALLOW_SIGN_RSA_MD5, 0 },
+    GNUTLS_VERIFY_DISABLE_TIME_CHECKS | GNUTLS_VERIFY_ALLOW_SIGN_RSA_MD5, 0 },
   { "v1ca fail", v1ca, &v1ca[2],
     0, GNUTLS_CERT_SIGNER_NOT_CA | GNUTLS_CERT_INVALID },
   { "v1ca expired", v1ca, &v1ca[2],