changed polarity on ocsp thisDate check to allow very timely responses

This commit is contained in:
John Safranek
2012-12-20 15:56:57 -08:00
parent 5164c15216
commit afbc34f0e0

View File

@ -4240,7 +4240,8 @@ static int DecodeSingleResponse(byte* source,
if (GetBasicDate(source, &idx, cs->thisDate,
&cs->thisDateFormat, size) < 0)
return ASN_PARSE_E;
if (!ValidateDate(cs->thisDate, cs->thisDateFormat, BEFORE))
/* Check thisDate <= now, or treat thisDate > now as a failure */
if (ValidateDate(cs->thisDate, cs->thisDateFormat, AFTER))
return ASN_BEFORE_DATE_E;
/* The following items are optional. Only check for them if there is more