[openssl/openssl] 4036f4: Add new public API for checking certificate times.

[Bob Beck]

Branch: refs/heads/master
Home: https://github.com/openssl/openssl
Commit: 4036f4b0e324ead33424ba83ececc2d3c649acc1
https://github.com/openssl/openssl/commit/4036f4b0e324ead33424ba83ececc2d3c649acc1
Author: Bob Beck <be...@openssl.org>
Date: 2025-12-18 (Thu, 18 Dec 2025)

Changed paths:
M apps/lib/apps.c
M apps/x509.c
M crypto/cmp/cmp_genm.c
M crypto/cmp/cmp_vfy.c
M crypto/ocsp/ocsp_cl.c
M crypto/x509/t_x509.c
M crypto/x509/x509_vfy.c
M doc/build.info
A doc/man3/X509_check_certificate_times.pod
R doc/man3/X509_cmp_time.pod
M include/crypto/x509.h
M include/openssl/macros.h
M include/openssl/x509.h.in
M test/recipes/25-test_x509.t
M test/x509_internal_test.c
M test/x509_time_test.c
M util/libcrypto.num

Log Message:
-----------
Add new public API for checking certificate times.

Fixes: #1631

This changes the previously internal ossl_x509_check_certificate_times()
to be the public X509_check_certificate_times(). It adds documentation
for the new function and marks X509_cmp_time, X509_cmp_timeframe,
and X509_cmp_current_time as deprecated in 4.0, as discussed in #1631.

Since the function is now public, we can replace the remaining
uses of deprecated stuff with this function.

Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29152)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications