changed polarity on ocsp thisDate check to allow very timely responses

pull/1/head
John Safranek 2012-12-20 15:56:57 -08:00
parent 5164c15216
commit afbc34f0e0
1 changed files with 2 additions and 1 deletions

View File

@ -4240,7 +4240,8 @@ static int DecodeSingleResponse(byte* source,
if (GetBasicDate(source, &idx, cs->thisDate,
&cs->thisDateFormat, size) < 0)
return ASN_PARSE_E;
if (!ValidateDate(cs->thisDate, cs->thisDateFormat, BEFORE))
/* Check thisDate <= now, or treat thisDate > now as a failure */
if (ValidateDate(cs->thisDate, cs->thisDateFormat, AFTER))
return ASN_BEFORE_DATE_E;
/* The following items are optional. Only check for them if there is more