Adding NO_ASN_TIME_CHECK build option

[lealem47]

Description

Skip all time checking without having to define NO_ASN_TIME. Originally developed as workaround for the issue addressed by #6181, but still a nice feature to have.

Fixes zd#15790

Testing

Tested with certs in certs/test/expired/

Checklist

• added tests
• updated/added doxygen
• updated appropriate READMEs
• Updated manual and documentation

[JacobBarthelmeh]

We have the VERIFY_SKIP_DATE option, could that be expanded to OCSP checks, allowing us to avoid adding another macro?

[lealem47]

We have the VERIFY_SKIP_DATE option, could that be expanded to OCSP checks, allowing us to avoid adding another macro?

That looks like it's going to involve duplicating wolfSSL_CertManagerLoadCA() and wolfSSL_CertManagerVerifyBuffer() to _ex() versions , only with the an additional flag parameter to pass in WOLFSSL_LOAD_FLAG_DATE_ERR_OKAY. Would that be a better change? @JacobBarthelmeh

[dgarske]

I like the PR. Please add some additional comments in asn.c for NO_ASN_TIME_CHECK to describe the other options for accomplishing this. I'd prefer they use one of the existing supported methods. Also indicate the possible security risk using it.
Over to @SparkiDev for additional feedback.

[SparkiDev]

Already this line above WOLFSSL_MSG.

[lealem47]

Thanks for catching that. I opened the PR before that was added.