Add option for relaxed X509 time verification.
The certificates are not valid according to the RFC, but are in wide
distribution across the internet. Hence the request to add a
compile-time flag to accept these certificates if wanted by the
application.
If POLARSSL_RELAXED_X509_DATE is enabled it will allow dates without
seconds, and allow dates with timezones (but doesn't actually use
the timezone).
Patch provided by OpenVPN.
diff --git a/ChangeLog b/ChangeLog
index 3b7c3ab..7ab61d3 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,12 @@
mbed TLS ChangeLog (Sorted per branch, date)
+= mbed TLS 1.3.x
+
+Changes
+ * Add compile time option for relaxed X509 time verification to enable
+ accepting certificates with non-standard time format (that is without
+ seconds or with a time zone). Patch provided by OpenVPN.
+
= mbed TLS 1.3.17 branch 2016-06-28
Security