CVSROOT: /cvs Module name: src Changes by: to...@cvs.openbsd.org 2020/08/18 15:02:49
Modified files:
sbin/iked : ca.c config.c iked.conf.5 iked.h ocsp.c parse.y
types.h
Log message:
Add optional time-stamp validaten for ocsp. The new optional 'tolerate'
parameter specifies how many seconds leeway are allowed in the check.
The optional maxage parameter indicates the allowed maximum age of
the `thisUpdate' OCSP attribute value.
ok patrick@
