Possible to verify client certificate BUT ignore expiration-date?

Christopher Schultz <[email protected]> Mon, 13 May 2019 17:28:28 -0400
Newsgroups gmane.network.stunnel.user
Message-ID <[email protected]>
All,

Does anyone know if it is possible to perform all other verification of
a client certificate EXCEPT allow the certificate to have expired?

We have a vendor whose certificate has expired, and we want to allow
their old certificate to work while they chase their tails trying to
figure out the best way to re-issue a new cert for us. *eyeroll*

Is it possible?

Thanks,
-chris

_______________________________________________
stunnel-users mailing list
[email protected]
https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users
signature.asc (application/pgp-signature, 899 B)
-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
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=n5cJ
-----END PGP SIGNATURE-----