diff --git a/.snpcc_canary b/.snpcc_canary index e9eb0ba33a62..b7eeab111669 100644 --- a/.snpcc_canary +++ b/.snpcc_canary @@ -4,4 +4,4 @@ /-xXx--//-----x=x--/-xXx--/---x---->>>--/ ... /\/\d(-_-)b/\/\ --- \ No newline at end of file +--/\ \ No newline at end of file diff --git a/CHANGELOG.md b/CHANGELOG.md index 69cf4507bd77..14878b4f0f7e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -12,6 +12,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0. ### Added - Introduced `ccf::describe_cose_endorsements_v1(receipt)` for COSE-endorsements chain of previous service identities (#6500). +- Ignore time when resolving did:x509 against x5chain, resolution establishes a point-in-time endorsement, not ongoing validity (#6575). ## [6.0.0-dev1] diff --git a/src/node/uvm_endorsements.h b/src/node/uvm_endorsements.h index 3de89e14213a..c59514a63bd8 100644 --- a/src/node/uvm_endorsements.h +++ b/src/node/uvm_endorsements.h @@ -287,7 +287,8 @@ namespace ccf const auto& did = phdr.iss; - auto did_document_str = didx509::resolve(pem_chain, did); + auto did_document_str = + didx509::resolve(pem_chain, did, true /* ignore time */); did::DIDDocument did_document = nlohmann::json::parse(did_document_str); if (did_document.verification_method.empty())