From 2d7c79a738552b56791719919fdb18453ebb0065 Mon Sep 17 00:00:00 2001 From: job Date: Fri, 2 Feb 2024 19:26:49 +0000 Subject: [PATCH] Remove old comment OK tb@ --- usr.sbin/rpki-client/mft.c | 12 +----------- 1 file changed, 1 insertion(+), 11 deletions(-) diff --git a/usr.sbin/rpki-client/mft.c b/usr.sbin/rpki-client/mft.c index a98e6ac33bd..57323f0a5c2 100644 --- a/usr.sbin/rpki-client/mft.c +++ b/usr.sbin/rpki-client/mft.c @@ -1,4 +1,4 @@ -/* $OpenBSD: mft.c,v 1.102 2024/01/31 06:57:21 tb Exp $ */ +/* $OpenBSD: mft.c,v 1.103 2024/02/02 19:26:49 job Exp $ */ /* * Copyright (c) 2022 Theo Buehler * Copyright (c) 2019 Kristaps Dzonsons @@ -301,16 +301,6 @@ mft_parse_econtent(const unsigned char *d, size_t dsz, struct parse *p) if (p->res->seqnum == NULL) goto out; - /* - * Timestamps: this and next update time. - * Validate that the current date falls into this interval. - * This is required by section 4.4, (3). - * If we're after the given date, then the MFT is stale. - * This is made super complicated because it uses OpenSSL's - * ASN1_GENERALIZEDTIME instead of ASN1_TIME, which we could - * compare against the current time trivially. - */ - if (!mft_parse_time(mft->thisUpdate, mft->nextUpdate, p)) goto out; -- 2.20.1