Dhi Aurrahman
Dhi Aurrahman
@yuan-stripe got it. Thanks! I'll take a look.
cc. @derekargueta who recently touched codes related to this.
Not sure about this, but from @mattklein123 https://github.com/envoyproxy/envoy/issues/3546#issuecomment-394786436, seems like it is not planned :). Would love to see Matt's opinion on this too.
cc. @tacigar
Copy over my comment on the PR https://github.com/envoyproxy/envoy/pull/35534 here: @ggreenway @kyessenov I think the certs in that particular test (e.g. https://github.com/google/boringssl/blob/0c6f40132b828e92ba365c6b7680e32820c63fa7/ssl/ssl_test.cc#L8014 are "expired" ("Not After" 2022-12-06). Probably the following options...
It seems like `ssl_compliance_policy_fips_202205` is not included in https://boringssl.googlesource.com/boringssl.git/+/refs/tags/fips-20220613?
Could you fix DCO? I think this is a legit change. Thanks!
Sorry, we can't reproduce this now. Could you check it again? Thank you.