openssl: Fail CRL validity check if thisUpdate is in the future

This commit is contained in:
Tobias Brunner
2018-05-22 09:50:47 +02:00
parent a0902d1ae0
commit 9c6b102ee0
@@ -358,7 +358,7 @@ METHOD(certificate_t, get_validity, bool,
{ {
*not_after = this->nextUpdate; *not_after = this->nextUpdate;
} }
return t <= this->nextUpdate; return (t >= this->thisUpdate && t <= this->nextUpdate);
} }
METHOD(certificate_t, get_encoding, bool, METHOD(certificate_t, get_encoding, bool,