nobody ? @eskimo, come on 🙂

Well, we have private root and it's published certificates are affected. Trustd throws error: Non-system-trusted leaf validity period longer than 825 days and issued on or after 1 July 2019 Why is that ? I thought private roots are unaffected. Attaching screenshots.

This particular implementation uses UDP. I've just tested also TCP in another(DNS) framer implementation. Behavior regarding isComplete is the same.