diff --git a/.snpcc_canary b/.snpcc_canary index a2af0bef65a3..ffe520bebb0f 100644 --- a/.snpcc_canary +++ b/.snpcc_canary @@ -3,4 +3,5 @@ O \ o | / /-xXx--//-----x=x--/-xXx--/---x---->>>--/ ... -/\/\(-_-) +/\/\d(-_-)b/\/\ +--/\ diff --git a/CHANGELOG.md b/CHANGELOG.md index e2d59479f824..0ac75c9d6215 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,12 +5,16 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/) and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html). +## [5.0.7] + +[5.0.7]: https://github.com/microsoft/CCF/releases/tag/ccf-5.0.7 + +- Ignore time when resolving did:x509 against x5chain, resolution establishes a point-in-time endorsement, not ongoing validity (#6575). + ## [5.0.6] [5.0.6]: https://github.com/microsoft/CCF/releases/tag/ccf-5.0.6 -### Bug fixes - - Added COSE signature verification to consume signature transactions from upgraded primary (#6495). ## [5.0.5] diff --git a/src/node/uvm_endorsements.h b/src/node/uvm_endorsements.h index 3de89e14213a..c59514a63bd8 100644 --- a/src/node/uvm_endorsements.h +++ b/src/node/uvm_endorsements.h @@ -287,7 +287,8 @@ namespace ccf const auto& did = phdr.iss; - auto did_document_str = didx509::resolve(pem_chain, did); + auto did_document_str = + didx509::resolve(pem_chain, did, true /* ignore time */); did::DIDDocument did_document = nlohmann::json::parse(did_document_str); if (did_document.verification_method.empty())