Topic: Ignore ALL date check errors

How do I temporarily ignore all date check errors (ASN_BEFORE/AFTER_DATE_E)
(For cert load, OCSP checking, etc...)

This should be configurable, like, only for a certain handshake, I should be able to ignore all types of date validity errors.

Share

Re: Ignore ALL date check errors

You'll need to supply a custom verify callback function. The verify callback is passed the error type and it gives you a chance to force a success or failure depending. See our API manual for the functions wolfSSL_set_verify() or wolfSSL_CTX_set_verify().