openssl: Fail CRL validity check if thisUpdate is in the future

2018-05-22 09:50:47 +02:00
parent a0902d1ae0
commit 9c6b102ee0
1 changed files with 1 additions and 1 deletions
@@ -358,7 +358,7 @@ METHOD(certificate_t, get_validity, bool,
 	{
 		*not_after = this->nextUpdate;
 	}
-	return t <= this->nextUpdate;
+	return (t >= this->thisUpdate && t <= this->nextUpdate);
 }

 METHOD(certificate_t, get_encoding, bool,