Files
apache_httpd/changes-entries/pr60028.txt
Joe Orton e5a19d43e0 mod_ssl: Accept expired client certs with optional_no_ca mode.
* modules/ssl/ssl_private.h (ssl_verify_error_is_optional): Add
  X509_V_ERR_CERT_HAS_EXPIRED to the list of error exceptions
  permitted for "optional_no_ca" mode.

Submitted by: Naveen Albert <apache2 phreaknet.org>
PR: 60028
Github: closes #509


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1926714 13f79535-47bb-0310-9956-ffa450edef68
2025-06-25 07:55:26 +00:00

4 lines
153 B
Plaintext

*) mod_ssl: For "SSLVerifyClient optional_no_ca" mode, accept
expired client certificates. PR 60028
[Naveen Albert <apache2 phreaknet.org>]