From 406a1464947c0569c519fc29f93b5784f5829757 Mon Sep 17 00:00:00 2001 From: Eric Mertens Date: Wed, 26 Jun 2024 10:24:22 -0700 Subject: [PATCH] Accept expired certificates --- librb/src/openssl.c | 1 + 1 file changed, 1 insertion(+) diff --git a/librb/src/openssl.c b/librb/src/openssl.c index e7487ac16..567aeee74 100644 --- a/librb/src/openssl.c +++ b/librb/src/openssl.c @@ -581,6 +581,7 @@ rb_get_ssl_certfp(rb_fde_t *const F, uint8_t certfp[const RB_SSL_CERTFP_LEN], co switch(SSL_get_verify_result(SSL_P(F))) { case X509_V_OK: + case X509_V_ERR_CERT_HAS_EXPIRED: case X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN: case X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE: case X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT: