On Mon, Aug 07, 2017 at 11:26:33AM -0500, Sam Voss wrote:
> Add the ability to ignore time-based errors from openssl by specifying a
> new configuration parameter, "check_crl_strict".
Thanks, applied with cleanup and fixes.
> diff --git a/src/crypto/tls_openssl.c b/src/crypto/tls_openssl.c
> @@ -188,6 +188,7 @@ struct tls_context {
> void *cb_ctx;
> int cert_in_cb;
> char *ocsp_stapling_response;
> + int check_crl_strict;
In particular, this struct tls_context is not appropriate place for this
type of configuration parameters, so I moved it into struct tls_data.
--
Jouni Malinen PGP id EFC895FA
_______________________________________________
Hostap mailing list
Hostap@xxxxxxxxxxxxxxxxxxx
http://lists.infradead.org/mailman/listinfo/hostap
