Description: verify CA paths at source code packaging time
Author: Milan Kupcevic <milan@debian.org>
Forwarded: not-needed
---
This patch header follows DEP-3: http://dep.debian.net/deps/dep3/
--- a/letsencrypt-ca/Makefile
+++ b/letsencrypt-ca/Makefile
@@ -103,26 +103,26 @@ clean :
 	$(RM) $(targets) *.pem
 
 check : all
-	openssl verify -CApath . isrgrootx1.pem
-	openssl verify -CApath . isrg-root-x2.pem
-	openssl verify -CApath . lets-encrypt-e5.pem
-	openssl verify -CApath . lets-encrypt-e6.pem
-	openssl verify -CApath . lets-encrypt-r10.pem
-	openssl verify -CApath . lets-encrypt-r11.pem
-	openssl verify -CApath . lets-encrypt-e7.pem
-	openssl verify -CApath . lets-encrypt-e8.pem
-	openssl verify -CApath . lets-encrypt-e9.pem
-	openssl verify -CApath . lets-encrypt-r12.pem
-	openssl verify -CApath . lets-encrypt-r13.pem
-	openssl verify -CApath . lets-encrypt-r14.pem
-	openssl verify -CApath . isrg-root-ye.pem
-	openssl verify -CApath . isrg-root-yr.pem
-	openssl verify -CApath . lets-encrypt-ye1.pem
-	openssl verify -CApath . lets-encrypt-ye2.pem
-	openssl verify -CApath . lets-encrypt-ye3.pem
-	openssl verify -CApath . lets-encrypt-yr1.pem
-	openssl verify -CApath . lets-encrypt-yr2.pem
-	openssl verify -CApath . lets-encrypt-yr3.pem
+	openssl verify -attime $(SOURCE_DATE_EPOCH) -CApath . isrgrootx1.pem
+	openssl verify -attime $(SOURCE_DATE_EPOCH) -CApath . isrg-root-x2.pem
+	openssl verify -attime $(SOURCE_DATE_EPOCH) -CApath . lets-encrypt-e5.pem
+	openssl verify -attime $(SOURCE_DATE_EPOCH) -CApath . lets-encrypt-e6.pem
+	openssl verify -attime $(SOURCE_DATE_EPOCH) -CApath . lets-encrypt-r10.pem
+	openssl verify -attime $(SOURCE_DATE_EPOCH) -CApath . lets-encrypt-r11.pem
+	openssl verify -attime $(SOURCE_DATE_EPOCH) -CApath . lets-encrypt-e7.pem
+	openssl verify -attime $(SOURCE_DATE_EPOCH) -CApath . lets-encrypt-e8.pem
+	openssl verify -attime $(SOURCE_DATE_EPOCH) -CApath . lets-encrypt-e9.pem
+	openssl verify -attime $(SOURCE_DATE_EPOCH) -CApath . lets-encrypt-r12.pem
+	openssl verify -attime $(SOURCE_DATE_EPOCH) -CApath . lets-encrypt-r13.pem
+	openssl verify -attime $(SOURCE_DATE_EPOCH) -CApath . lets-encrypt-r14.pem
+	openssl verify -attime $(SOURCE_DATE_EPOCH) -CApath . isrg-root-ye.pem
+	openssl verify -attime $(SOURCE_DATE_EPOCH) -CApath . isrg-root-yr.pem
+	openssl verify -attime $(SOURCE_DATE_EPOCH) -CApath . lets-encrypt-ye1.pem
+	openssl verify -attime $(SOURCE_DATE_EPOCH) -CApath . lets-encrypt-ye2.pem
+	openssl verify -attime $(SOURCE_DATE_EPOCH) -CApath . lets-encrypt-ye3.pem
+	openssl verify -attime $(SOURCE_DATE_EPOCH) -CApath . lets-encrypt-yr1.pem
+	openssl verify -attime $(SOURCE_DATE_EPOCH) -CApath . lets-encrypt-yr2.pem
+	openssl verify -attime $(SOURCE_DATE_EPOCH) -CApath . lets-encrypt-yr3.pem
 
 pems : $(pems)
 
