CertReq: Expired Certificate Validation #268
Draft
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Pull Request (PR) description
Adds logic to exclude certificates which have already expired from being included in the array of certificates returned from the certificate store, when building a certificate request to be submitted to the PKI.
If the certificate request attempts to perform renewal on a certificate that has already expired, the certificate request will be denied by the Certification Authority with an error:
Certificate not issued (Denied) Error Verifying Request Signature or Signing Certificate A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.This Pull Request (PR) fixes the following issues
None
Task list
file CHANGELOG.md. Entry should say what was changed and how that
affects users (if applicable), and reference the issue being resolved
(if applicable).
and comment-based help.
This change is