--- modules/ssl/ssl_private.old.h	2009-03-24 00:22:45.000000000 +0000
+++ modules/ssl/ssl_private.old.h	2009-03-16 22:12:49.000000000 +0000
@@ -233,6 +233,9 @@ 
 #define ssl_verify_error_is_optional(errnum) \
    ((errnum == X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT) \
     || (errnum == X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN) \
+	|| (errnum == X509_V_ERR_CERT_NOT_YET_VALID) \
+	|| (errnum == X509_V_ERR_CERT_HAS_EXPIRED) \
+	|| (errnum == X509_V_ERR_CERT_REVOKED) \
     || (errnum == X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY) \
     || (errnum == X509_V_ERR_CERT_UNTRUSTED) \
     || (errnum == X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE))