summaryrefslogtreecommitdiff
path: root/m4/hooks.m4
diff options
context:
space:
mode:
authorNikos Mavrogiannopoulos <nmav@gnutls.org>2019-12-26 09:31:19 +0000
committerNikos Mavrogiannopoulos <nmav@gnutls.org>2019-12-26 09:31:19 +0000
commit0af5ee946d2e49549ff19968e13d0703b3dcf75e (patch)
tree373f1d010011a93d7f246e79ce3de996d45d256a /m4/hooks.m4
parent58a45b8c2fbf2f0ff22e1c7c7762d0cb00855df9 (diff)
parent49d27a55031e72ade52984f5cd94e82e97b46228 (diff)
downloadgnutls-0af5ee946d2e49549ff19968e13d0703b3dcf75e.tar.gz
Merge branch 'tmp-strict-x509-time' into 'master'
Do not tolerate invalid DER time Closes #207 See merge request gnutls/gnutls!1141
Diffstat (limited to 'm4/hooks.m4')
-rw-r--r--m4/hooks.m414
1 files changed, 14 insertions, 0 deletions
diff --git a/m4/hooks.m4 b/m4/hooks.m4
index 34a5b38eb9..49367bd1da 100644
--- a/m4/hooks.m4
+++ b/m4/hooks.m4
@@ -144,6 +144,20 @@ LIBTASN1_MINIMUM=4.9
AC_MSG_WARN([C99 macros not supported. This may affect compiling.])
])
+ ac_strict_der_time=yes
+ AC_MSG_CHECKING([whether to disable strict DER time encodings for backwards compatibility])
+ AC_ARG_ENABLE(strict-der-time,
+ AS_HELP_STRING([--disable-strict-der-time],
+ [allow non compliant DER time values]),
+ ac_strict_der_time=$enableval)
+ if test x$ac_strict_der_time != xno; then
+ AC_MSG_RESULT(no)
+ AC_DEFINE([STRICT_DER_TIME], 1, [force strict DER time constraints])
+ else
+ AC_MSG_RESULT(yes)
+ fi
+ AM_CONDITIONAL(STRICT_DER_TIME, test "$ac_strict_der_time" != "no")
+
ac_allow_sha1=no
AC_MSG_CHECKING([whether to allow SHA1 as an acceptable hash for cert digital signatures])
AC_ARG_ENABLE(sha1-support,