commit d35ff2c0ade0a12e84aaa2e9841b4983a2f3cf45
author David Woodhouse <David.Woodhouse@intel.com> Fri Jul 31 08:49:50 2015 +0100
committer Rich Salz <rsalz@openssl.org> Sat Sep 05 16:17:15 2015 -0400
tree ea7207dd84a2a5ab1e18e9f9711cb966e46751a0
parent 2519b4e18101a7e987dad842084cd1da5da5c191

RT3951: Add X509_V_FLAG_NO_CHECK_TIME to suppress time check

In some environments, such as firmware, the current system time is entirely
meaningless. Provide a clean mechanism to suppress the checks against it.

Signed-off-by: Rich Salz <rsalz@akamai.com>
Reviewed-by: Tim Hudson <tjh@openssl.org>

apps/opt.c

diff --git a/apps/opt.c b/apps/opt.c
index bfb039e..c7dcc43 100644
--- a/apps/opt.c
+++ b/apps/opt.c
@@ -543,6 +543,10 @@
         break;
     case OPT_V_NO_ALT_CHAINS:
         X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_NO_ALT_CHAINS);
+	break;
+    case OPT_V_NO_CHECK_TIME:
+        X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_NO_CHECK_TIME);
+	break;
     }
     return 1;