When verifying an OCSP response included in TLS don't fail if the response is old.
commitc7c228b0619cfdc27e2f156d67e7732ee0b02829
authorNikos Mavrogiannopoulos <nmav@gnutls.org>
Tue, 6 Nov 2012 21:47:02 +0000 (6 22:47 +0100)
committerNikos Mavrogiannopoulos <nmav@gnutls.org>
Tue, 6 Nov 2012 21:47:04 +0000 (6 22:47 +0100)
treeb18b04ee8ddf2fe21854815d3a57382898ee7e99
parentb21ed9ee52cf8678d048075fa56ceecf6fa69241
When verifying an OCSP response included in TLS don't fail if the response is old.

That is to avoid creating more problems for a server that included an
old response, from a server that included none.
Also renamed: Too old -> Superseded.
lib/gnutls_cert.c
lib/gnutls_x509.c
lib/includes/gnutls/gnutls.h.in
lib/x509/verify.c