MBEDTLS time/date support with nRF Security

[Ligo George]

Is MBEDTLS date/time is not supported in nRF security ?

warning: MBEDTLS_HAVE_TIME_DATE (defined at modules/mbedtls/Kconfig.tls-generic:458,
modules/mbedtls/Kconfig.tls-generic:458) was assigned the value 'y' but got the value 'n'. Check
these unsatisfied dependencies: ((MBEDTLS_BUILTIN && MBEDTLS_CFG_FILE = "config-tls-generic.h" &&
MBEDTLS) || (MBEDTLS_BUILTIN && MBEDTLS_CFG_FILE = "config-tls-generic.h" && MBEDTLS && 0)) (=n).
See http://docs.zephyrproject.org/latest/kconfig.html#CONFIG_MBEDTLS_HAVE_TIME_DATE and/or look up
MBEDTLS_HAVE_TIME_DATE in the menuconfig/guiconfig interface. The Application Development Primer,
Setting Configuration Values, and Kconfig - Tips and Best Practices sections of the manual might be
helpful too.

We would like to have certificate validity check, but unable to enable it. 

[Ligo George]

We get time from internet and update the system time using Zephyr time utils and time is running fine.

It looks like the certificate expiry checks are not working since MBEDTLS_HAVE_TIME_DATE is not supported. 

[dejans]

Hi,

Can you provide information on how you tried to check certificate expiry?

Best regards,
Dejan

[Ligo George]

For e.g. we can check, if the time is not set the default time will be wrong (start of epoch). The certificates are not valid from epoch start. Or simply by setting a future time where the certificate is expired. 

[dejans]

Hi,

We will further look into the possibility for mbedtls to check certificate expiration date. I expect to get back to you with new information probably within next few weeks.

Best regards,
Dejan