Changeset f7a7d66 in mod_gnutls for src

Timestamp:

Jun 30, 2009, 2:02:38 PM (11 years ago)

Author:

Nokis Mavrogiannopoulos <nmav@…>

Branches:

debian/master, debian/stretch-backports, jessie-backports, master, msva, upstream

Children:

a601e7d

Parents:

7e67487

git-author:

Nikos Mavrogiannopoulos <nmav@…> (06/30/09 14:02:38)

git-committer:

Nokis Mavrogiannopoulos <nmav@…> (06/30/09 14:02:38)

Message:

Allow openpgp certificates that have infinite expiration time. Suggestion by MattLoar? at ​http://issues.outoforder.cc/view.php?id=96.

File:

• src/gnutls_hooks.c (modified) (1 diff)

src/gnutls_hooks.c

@@ -1110 +1110 @@
     }
 
-    if (expiration_time < cur_time) {
-        ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r,
+    if (gnutls_certificate_type_get( ctxt->session) != GNUTLS_CRT_OPENPGP || expiration_time != 0) {
+        if (expiration_time < cur_time) {
+            ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r,
                       "GnuTLS: Failed to Verify Peer: "
                       "Peer Certificate is expired.");
-        expired = 1;
+            expired = 1;
+        }
     }