]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
mod_ssl: Accept expired client certs with optional_no_ca mode.
authorJoe Orton <jorton@apache.org>
Wed, 25 Jun 2025 07:55:26 +0000 (07:55 +0000)
committerJoe Orton <jorton@apache.org>
Wed, 25 Jun 2025 07:55:26 +0000 (07:55 +0000)
commite5a19d43e026533a802b96d88f0a83301f20643e
treed582b24e3cc1af720aef86a1a229436a697e42d7
parenta54b3778a927f20db0ac4e4b006a5563675c2e5f
mod_ssl: Accept expired client certs with optional_no_ca mode.

* modules/ssl/ssl_private.h (ssl_verify_error_is_optional): Add
  X509_V_ERR_CERT_HAS_EXPIRED to the list of error exceptions
  permitted for "optional_no_ca" mode.

Submitted by: Naveen Albert <apache2 phreaknet.org>
PR: 60028
Github: closes #509

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1926714 13f79535-47bb-0310-9956-ffa450edef68
changes-entries/pr60028.txt [new file with mode: 0644]
modules/ssl/ssl_private.h