CVSROOT: /cvs Module name: src Changes by: t...@cvs.openbsd.org 2025/07/06 13:29:13
Modified files:
usr.sbin/rpki-client: cert.c
Log message:
rpki-client: allow notBefore == notAfter
The validity period is a closed interval, possibly degenerate. There are
certificates by AfriNIC that are valid during precisely one second just
before Christmas 2030. Gotta handle those correctly for the case someone
validates them in exactly the right moment.
ok job
