tree 16660f5d4a92349e154ecaab35175ccb03e468f1
parent 9d05ffa60e19756406ebec31c2b07949c61544ae
author Pete Bentley <prb@google.com> 1670433848 +0000
committer Pete Bentley <prb@google.com> 1670958931 +0000

Add X509_V_FLAG_NO_CHECK_TIME.

Cherry-picked from
https://boringssl-review.googlesource.com/c/boringssl/+/53965
and needed for a following test fix.  The new flag value will
only be used in tests on branches that this change is cherry-picked
to.  This patch is slightly editted from the original as it
didn't apply cleanly, but is functionally identical.

Original commit message:
This was added in OpenSSL 1.1.0. cryptography.io binds it. They don't
actually use it, but this is a useful feature to have anyway. Projects
like Envoy currently implement such a mode with
X509_STORE_set_verify_cb, which is a very problematic API to support.
Add this so we can move them to something more sustainable.

Bug: 261669237
Test: atest boringsl_crypto_test boringssl_ssl_test
Change-Id: Ifa2951df37ad2742486c68f012d4c9aefee374d1
Merged-In: Ifa2951df37ad2742486c68f012d4c9aefee374d1
(cherry picked from commit a739d914c9b8d80a480a660d03eae10e442a7a39)