Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Set time directly on the x509 store #770

Merged

Conversation

segiddins
Copy link
Contributor

Instead of an ivar, so other ossl functions that take a store (such as OpenSSL::Timestamp::Response#verify) will use the correct time when verifying

@segiddins segiddins force-pushed the segiddins/set-time-directly-on-the-x509-store branch from b4ae6c4 to dca2ee8 Compare June 25, 2024 18:51
@segiddins segiddins marked this pull request as ready for review June 25, 2024 19:01
@segiddins segiddins force-pushed the segiddins/set-time-directly-on-the-x509-store branch 2 times, most recently from a508d5c to 2679889 Compare June 25, 2024 21:00
segiddins added a commit to sigstore/sigstore-ruby that referenced this pull request Jun 26, 2024
@segiddins
Copy link
Contributor Author

Unsure why that one build failed, @rhenium mind restarting it? Everything was green earlier

Instead of an ivar, so other ossl functions that take a store will use the correct time when verifying
@segiddins segiddins force-pushed the segiddins/set-time-directly-on-the-x509-store branch from 2679889 to 69c57f6 Compare June 27, 2024 18:21
@segiddins
Copy link
Contributor Author

@rhenium done!

segiddins added a commit to sigstore/sigstore-ruby that referenced this pull request Jun 27, 2024
Depends on ruby/openssl#770

Signed-off-by: Samuel Giddins <[email protected]>
segiddins added a commit to sigstore/sigstore-ruby that referenced this pull request Jun 28, 2024
Depends on ruby/openssl#770

Signed-off-by: Samuel Giddins <[email protected]>
segiddins added a commit to sigstore/sigstore-ruby that referenced this pull request Jun 28, 2024
Depends on ruby/openssl#770

Signed-off-by: Samuel Giddins <[email protected]>
Copy link
Member

@rhenium rhenium left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A #if needs to be changed to #ifdef. Otherwise it looks good to me!

ext/openssl/ossl_x509store.c Outdated Show resolved Hide resolved
@segiddins
Copy link
Contributor Author

@rhenium should be ready to merge!

@rhenium rhenium merged commit 21aadc6 into ruby:master Jul 24, 2024
54 checks passed
matzbot pushed a commit to ruby/ruby that referenced this pull request Jul 24, 2024
(ruby/openssl#770)

Instead of an ivar, so other ossl functions that take a store will use the correct time when verifying

ruby/openssl@21aadc66ae
@rhenium
Copy link
Member

rhenium commented Jul 24, 2024

Yes, it looks good to me. Thank you!

@segiddins segiddins deleted the segiddins/set-time-directly-on-the-x509-store branch July 24, 2024 18:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

3 participants