Flag certificates which have KeyNames and expire beyond the end of 2014.

internet2 · Mar 7, 2014 · d8abbd9 · d8abbd9
1 parent 851df1c
commit d8abbd9
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/build/check_embedded.pl b/build/check_embedded.pl
@@ -280,6 +280,7 @@ sub comment {
 				#
 				if ($notAfter =~ /(\d\d\d\d)/) {
 					my $year = $1;
+					$expiryYear = $year;
 					if ($year > $maxYear) {
 						$maxYear = $year;
 					}
@@ -481,6 +482,9 @@ sub comment {
 			warning("issuer \"$issuerCN\" to be retired; certificate expires $notAfter; remove KeyName?");
 			$issuerMark{$issuerCN} = '*';
 		}
+		if ($hasKeyName && ($expiryYear > 2014)) {
+			warning("expires $notAfter, which is later than 2014");
+		}
 
 		#
 		# Count issuers.