Variable CAPROCK_EXPIRY_POLICY_LOCAL

Variable Documentation

char const *const CAPROCK_EXPIRY_POLICY_LOCAL

The CAPROCK_EXPIRY_POLICY_LOCAL is weaker than CAPROCK_EXPIRY_POLICY_ISSUER, and permits the system to override the issuer’s expiry policy with a local policy. This may be useful for limited situations in which an issuer-led policy cannot possibly be enforced at all times, for example before a system has synchronized its system clock.