Restore didx509 time validation, update test's sample SNP report (#5888)

microsoft · Jan 5, 2024 · 43feda0 · 43feda0
1 parent d95a0ce
commit 43feda0
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 27 deletions.
diff --git a/src/node/uvm_endorsements.h b/src/node/uvm_endorsements.h
@@ -282,11 +282,7 @@ namespace ccf
 
     const auto& did = phdr.iss;
 
-    auto did_document_str = didx509::resolve(
-      pem_chain,
-      did,
-      true // Ignore time validation (allow expired certs)
-    );
+    auto did_document_str = didx509::resolve(pem_chain, did);
     did::DIDDocument did_document = nlohmann::json::parse(did_document_str);
 
     if (did_document.verification_method.empty())