Accept expired certificates

solanum-ircd · Jun 26, 2024 · 406a146 · 406a146
1 parent e639f5b
commit 406a146
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/librb/src/openssl.c b/librb/src/openssl.c
@@ -581,6 +581,7 @@ rb_get_ssl_certfp(rb_fde_t *const F, uint8_t certfp[const RB_SSL_CERTFP_LEN], co
 	switch(SSL_get_verify_result(SSL_P(F)))
 	{
 	case X509_V_OK:
+	case X509_V_ERR_CERT_HAS_EXPIRED:
 	case X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN:
 	case X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE:
 	case X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT: