From 99d47bcb4092318b3a8b5dedf8696fa512e1d9bf Mon Sep 17 00:00:00 2001 From: beltram Date: Wed, 28 Feb 2024 10:22:52 +0100 Subject: [PATCH] fix: remove x509 expiration validation when decoding a message --- openmls/src/framing/validation.rs | 2 -- 1 file changed, 2 deletions(-) diff --git a/openmls/src/framing/validation.rs b/openmls/src/framing/validation.rs index 17aa4f180e..5c7dddd0b0 100644 --- a/openmls/src/framing/validation.rs +++ b/openmls/src/framing/validation.rs @@ -295,8 +295,6 @@ impl UnverifiedMessage { use openmls_x509_credential::X509Ext; let (_, child_cert) = a?; let (parent_idx, parent_cert) = b?; - // verify not expired - child_cert.is_valid()?; // verify that child is signed by parent child_cert.is_signed_by(backend.crypto(), parent_cert)?;