On Thu, Jan 20, 2022 at 12:02:55PM +0100, Claudio Jeker wrote: > Lets move the time validity checks for TA to cert.c. ta_parse already > checks the pubkey so why not do all validity checks.
ok > While doing that remove the code to extract the subject. All errors print > the filename and the subject itself is just extra information that is less > helpful in the use case of rpki-client. Agreed. X509_NAME_oneline() is a bizarre beast anyway.
