mirror of
https://github.com/wolfSSL/wolfssl.git
synced 2025-07-29 18:27:29 +02:00
changed polarity on ocsp thisDate check to allow very timely responses
This commit is contained in:
@ -4240,7 +4240,8 @@ static int DecodeSingleResponse(byte* source,
|
||||
if (GetBasicDate(source, &idx, cs->thisDate,
|
||||
&cs->thisDateFormat, size) < 0)
|
||||
return ASN_PARSE_E;
|
||||
if (!ValidateDate(cs->thisDate, cs->thisDateFormat, BEFORE))
|
||||
/* Check thisDate <= now, or treat thisDate > now as a failure */
|
||||
if (ValidateDate(cs->thisDate, cs->thisDateFormat, AFTER))
|
||||
return ASN_BEFORE_DATE_E;
|
||||
|
||||
/* The following items are optional. Only check for them if there is more
|
||||
|
Reference in New Issue
Block a user