From baf9bef8a353ec4f53964f74ffc1dd97bc3200fc Mon Sep 17 00:00:00 2001 From: John Safranek Date: Wed, 26 Dec 2012 21:41:12 -0800 Subject: [PATCH] Revert "changed polarity on ocsp thisDate check to allow very timely responses" This reverts commit afbc34f0e03bea0ae83c792b7c35a541876b9a97. --- ctaocrypt/src/asn.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/ctaocrypt/src/asn.c b/ctaocrypt/src/asn.c index c30263be2..785e49e50 100644 --- a/ctaocrypt/src/asn.c +++ b/ctaocrypt/src/asn.c @@ -4240,8 +4240,7 @@ static int DecodeSingleResponse(byte* source, if (GetBasicDate(source, &idx, cs->thisDate, &cs->thisDateFormat, size) < 0) return ASN_PARSE_E; - /* Check thisDate <= now, or treat thisDate > now as a failure */ - if (ValidateDate(cs->thisDate, cs->thisDateFormat, AFTER)) + if (!ValidateDate(cs->thisDate, cs->thisDateFormat, BEFORE)) return ASN_BEFORE_DATE_E; /* The following items are optional. Only check for them if there is more