Small adjustment in CRL validation.

Perry Werneck
1 parent c4188808
Showing 1 changed file with 1 additions and 2 deletions Show diff stats
src/lib3270/ssl/ctx_init.c
@@ -112,10 +112,9 @@ int lib3270_check_X509_crl(H3270 *hSession, SSL_ERROR_MESSAGE * message)
 	{
  
 		// https://stackoverflow.com/questions/23407376/testing-x509-certificate-expiry-date-with-c
-		time_t now = time(NULL);
 		const ASN1_TIME * next_update = X509_CRL_get0_nextUpdate(hSession->ssl.crl.cert);
  
-		if(X509_cmp_time(next_update, &now))
+		if(X509_cmp_current_time(next_update))
 		{
 			int day, sec;
 			if(ASN1_TIME_diff(&day, &sec, NULL, next_update))
...	...	@@ -112,10 +112,9 @@ int lib3270_check_X509_crl(H3270 hSession, SSL_ERROR_MESSAGE message)
112	112	{
113	113
114	114	// https://stackoverflow.com/questions/23407376/testing-x509-certificate-expiry-date-with-c
115		- time_t now = time(NULL);
116	115	const ASN1_TIME * next_update = X509_CRL_get0_nextUpdate(hSession->ssl.crl.cert);
117	116
118		- if(X509_cmp_time(next_update, &now))
	117	+ if(X509_cmp_current_time(next_update))
119	118	{
120	119	int day, sec;
121	120	if(ASN1_TIME_diff(&day, &sec, NULL, next_update))
...	...