google-nomulus/util
Lai Jiang 33f9bc30b7 Ignore invalid old CRL when performing update. (#1946)
There is no point comparing the old CRL to the new ones when the old one
is invalid. This could happen when the CA cert rotates, after which the
old CRL stop being valid as it fails signature verification against the
new cert.

This change will allow us to keep updating the CRL after a CA rotation without
having to manually delete the old CRL from the database.

See b/270983553.

<!-- Reviewable:start -->
- - -
This change is [<img src="https://reviewable.io/review_button.svg" height="34" align="absmiddle" alt="Reviewable"/>](https://reviewable.io/reviews/google/nomulus/1946)
<!-- Reviewable:end -->
2023-02-28 10:00:18 -05:00
..
src Ignore invalid old CRL when performing update. (#1946) 2023-02-28 10:00:18 -05:00
build.gradle Remove Ofy (#1863) 2022-12-02 22:28:33 -05:00
buildscript-gradle.lockfile Upgrade to Gradle 7.0 (#1712) 2022-07-26 11:41:27 -04:00
gradle.lockfile Upgrade to Gradle 7.3.2 (#1922) 2023-01-25 12:47:35 -05:00