Revert "Accept expired certificates"

This reverts commit 9aac0cf8125063cdaa1dc7bf9ef97929042f3500.

diff --git a/librb/src/openssl.c b/librb/src/openssl.c
index 567aeee74fd020b881522f76f1bbdd12c3bf26c2..e7487ac163249a2c2624cca99435487c434513ef 100644 (file)
--- a/librb/src/openssl.c
+++ b/librb/src/openssl.c
@@ -581,7 +581,6 @@ rb_get_ssl_certfp(rb_fde_t *const F, uint8_t certfp[const RB_SSL_CERTFP_LEN], co
        switch(SSL_get_verify_result(SSL_P(F)))
        {
        case X509_V_OK:
-       case X509_V_ERR_CERT_HAS_EXPIRED:
        case X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN:
        case X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE:
        case X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT: