italiangrid/voms — pull request #9 by msalle (2014-05-12 11:31:07+00:00)
Title: Make sure OpenSSL also uses the voms verification time.

VOMS has an API call to set the verification time, VOMS_SetVerificationTime(),
to set the time at which an AC should be valid. However, the certificate(chain)
used to sign the AC (i.e. the VOMS server certificate and chain) is checked
using OpenSSLs X509_verify_cert() which checks it at the current time. The
logical time to check that chain would be the same time as used for the AC
itself. In order to do that, we call the OpenSSL X509_VERIFY_PARAM_set_time().