| commit | 243d61894caed8938c6a13d2b666e6df28a98c18 | [log] [tgz] |
|---|---|---|
| author | Paul Bakker <p.j.bakker@polarssl.org> | Tue Jul 08 14:40:58 2014 +0200 |
| committer | Paul Bakker <p.j.bakker@polarssl.org> | Tue Jul 08 14:40:58 2014 +0200 |
| tree | a6e791a53e5d6007ea8342ec13bb399dd2b0a4be | |
| parent | f48de9579f562bd28fefb60925321eda9bc58530 [diff] [blame] |
Reject certificates with times not in UTC
diff --git a/ChangeLog b/ChangeLog index 8c064ad..e24494a 100644 --- a/ChangeLog +++ b/ChangeLog
@@ -11,6 +11,7 @@ that prevented bignum.c from compiling. (Reported by Rafael Baptista.) * Improvements to tests/Makefile, contributed by Oden Eriksson. * Use UTC time to check certificate validity. + * Reject certificates with times not in UTC, per RFC 5280. Security * Forbid change of server certificate during renegotiation to prevent