verifier: translate new CertificateError variants

Author: ctz

src/verifier.rs

@@ -287,15 +287,20 @@ fn translate_verify_result(result: &Result<(), Error>) -> i32 {
         Err(Error::InvalidCertificate(CertificateError::UnknownIssuer)) => {
             X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY
         }
-        Err(Error::InvalidCertificate(CertificateError::NotValidYet)) => {
+        Err(Error::InvalidCertificate(CertificateError::NotValidYet))
+        | Err(Error::InvalidCertificate(CertificateError::NotValidYetContext { .. })) => {
             X509_V_ERR_CERT_NOT_YET_VALID
         }
-        Err(Error::InvalidCertificate(CertificateError::Expired)) => X509_V_ERR_CERT_HAS_EXPIRED,
+        Err(Error::InvalidCertificate(CertificateError::Expired))
+        | Err(Error::InvalidCertificate(CertificateError::ExpiredContext { .. })) => {
+            X509_V_ERR_CERT_HAS_EXPIRED
+        }
         Err(Error::InvalidCertificate(CertificateError::Revoked)) => X509_V_ERR_CERT_REVOKED,
         Err(Error::InvalidCertificate(CertificateError::InvalidPurpose)) => {
             X509_V_ERR_INVALID_PURPOSE
         }
-        Err(Error::InvalidCertificate(CertificateError::NotValidForName)) => {
+        Err(Error::InvalidCertificate(CertificateError::NotValidForName))
+        | Err(Error::InvalidCertificate(CertificateError::NotValidForNameContext { .. })) => {
             X509_V_ERR_HOSTNAME_MISMATCH
         }
         // TODO: more mappings can go here