denozord/strongswan-ext
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

x509: Fail CRL validity check if thisUpdate is in the future

Browse Source
This commit is contained in:
Tobias Brunner committed 2018-05-22 09:50:47 +02:00
1 parent 6143f926ef
commit a0902d1ae0
1 file changed
+1 -1
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/plugins/x509/x509_crl.c
+1 -1
View File
@@ -546,7 +546,7 @@ METHOD(certificate_t, get_validity, bool,
{ {
*not_after = this->nextUpdate; *not_after = this->nextUpdate;
} }
return (t <= this->nextUpdate); return (t >= this->thisUpdate && t <= this->nextUpdate);
} }
METHOD(certificate_t, get_encoding, bool, METHOD(certificate_t, get_encoding, bool,