Tobias Frauenschläger d350914231 Enforce attribute certificate validity period in VerifyX509Acert ...

VerifyX509Acert parsed the acert and checked the signature but never
validated the notBefore and notAfter dates, so wolfSSL_X509_ACERT_verify
and wc_VerifyX509Acert accepted expired or not-yet-valid attribute
certificates whenever the signature was good. Call CheckDate for both
validity bounds before signature verification. CheckDate returns the
proper date error and honors the runtime skip-date control. Also correct
ParseX509Acert to report ASN_AFTER_DATE_E instead of ASN_BEFORE_DATE_E
when the notAfter date check fails.

Fixes F-6986.

2026-07-22 13:07:55 +02:00

..

benchmark

Implement FIPS shimming for wc_AesGcmEncrypt():

2026-07-20 11:09:53 -05:00

src

Enforce attribute certificate validity period in VerifyX509Acert

2026-07-22 13:07:55 +02:00

test

se050: key_only_id bug fixes

2026-07-22 10:54:43 +02:00