commit 1ccef4908ce04adc6d246262846f3cd8a111fa44
author Bob Beck <bbe@google.com> Tue Dec 06 16:07:05 2022 -0700
committer David Benjamin <davidben@google.com> Thu Dec 08 19:05:10 2022 +0000
tree aedb4e6203869ad95dc0a911ec16cc97a30052ca
parent 1ee71185a2322dc354bee5e5a0abfb1810a27dc6

Fix timebomb by disabling time check in this test

Bug: b:261632678, chromium:1396479
Change-Id: I82f7ce05ece8b5c145d4394dc0d4173e357ce176
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/55585
Reviewed-by: David Benjamin <davidben@google.com>
Commit-Queue: Bob Beck <bbe@google.com>
(cherry picked from commit 28f96c2686459add7acedcd97cb841030bdda019)
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/55566
Reviewed-by: Adam Langley <agl@google.com>

ssl/ssl_test.cc

diff --git a/ssl/ssl_test.cc b/ssl/ssl_test.cc
index 3709a46..3515f60 100644
--- a/ssl/ssl_test.cc
+++ b/ssl/ssl_test.cc
@@ -8042,6 +8042,8 @@
   SSL_CTX_set_verify(client_ctx.get(),
                      SSL_VERIFY_PEER | SSL_VERIFY_FAIL_IF_NO_PEER_CERT,
                      nullptr);
+  X509_VERIFY_PARAM_set_flags(SSL_CTX_get0_param(client_ctx.get()),
+                              X509_V_FLAG_NO_CHECK_TIME);
 
   struct TestCase {
     X509 *cert;