]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Warn user if their certificate has expired
authorSteffan Karger <steffan@karger.me>
Mon, 14 Dec 2015 20:09:18 +0000 (21:09 +0100)
committerGert Doering <gert@greenie.muc.de>
Mon, 14 Dec 2015 20:24:49 +0000 (21:24 +0100)
commit091edd8e2996867447eeb665af957547aa8b3107
tree5f1d5aade7c8e775e6b598f4032c360b9e02b95b
parent9dff2c1f106865a72a1d505076751dde170e88dc
Warn user if their certificate has expired

Previously, client certificate expiry warnings would only visible in the
server log, and server certificate expiry warnings in the client log.
Both after a (failed) connection attempt.  This patch adds a warning to
log when a users own certificate has expired (or is not yet valid) to ease
problem diagnosis / error reporting.

Note that this is just a warning, since on some systems (notably embedded
devices) there might be no correct time available.

Signed-off-by: Steffan Karger <steffan@karger.me>
Acked-by: Gert Doering <gert@greenie.muc.de>
Message-Id: <1450123758-31641-1-git-send-email-steffan@karger.me>
URL: http://article.gmane.org/gmane.network.openvpn.devel/10794
Signed-off-by: Gert Doering <gert@greenie.muc.de>
src/openvpn/ssl.c
src/openvpn/ssl_backend.h
src/openvpn/ssl_openssl.c
src/openvpn/ssl_polarssl.c