openssl cms verification date

[Eliot Lear]

[Retry]

Tomas,

Having raised this point myself before, and having been corrected before 
(and I'm glad I was), I wonder this: do you or other people on this list 
have a favorite FAQy-like doc that talks about cert expiration and 
verification strategies?  And not just expiration but Not-Valid-Before 
as well.  There are real challenges with both, especially with IoT.  My 
toe still hurts from having stubbed myself on this one repeatedly.

Thanks,

Eliot
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0x87B66B46D9D27A33.asc
Type: application/pgp-keys
Size: 2712 bytes
Desc: OpenPGP public key
URL: <https://mta.openssl.org/pipermail/openssl-users/attachments/20240208/8ab42d97/attachment.asc>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: OpenPGP digital signature
URL: <https://mta.openssl.org/pipermail/openssl-users/attachments/20240208/8ab42d97/attachment.sig>