Check that the CMS signing-time is not after the MFT's nextUpdate
authorjob <job@openbsd.org>
Mon, 13 Mar 2023 19:54:36 +0000 (19:54 +0000)
committerjob <job@openbsd.org>
Mon, 13 Mar 2023 19:54:36 +0000 (19:54 +0000)
commit36b57f808370ab9beae28e0a476df33e4bea1a1b
tree629302f54c9ab4712d80724cd1adecaf30997789
parent894936b4b8452577a3563b18a19de62c56fe4c4d
Check that the CMS signing-time is not after the MFT's nextUpdate

Issuing manifests whose validity window is entirely in the past, as
observed from the purported CMS signing-time would be a form of backdating.

OK tb@
usr.sbin/rpki-client/mft.c