From 001840a6af54d2b51350708923e2f4803f903063 Mon Sep 17 00:00:00 2001 From: Perry Werneck Date: Wed, 27 Feb 2019 15:07:08 -0300 Subject: [PATCH] Small adjustment in CRL validation. --- src/lib3270/ssl/ctx_init.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/src/lib3270/ssl/ctx_init.c b/src/lib3270/ssl/ctx_init.c index e98b2f4..6db1e44 100644 --- a/src/lib3270/ssl/ctx_init.c +++ b/src/lib3270/ssl/ctx_init.c @@ -112,10 +112,9 @@ int lib3270_check_X509_crl(H3270 *hSession, SSL_ERROR_MESSAGE * message) { // https://stackoverflow.com/questions/23407376/testing-x509-certificate-expiry-date-with-c - time_t now = time(NULL); const ASN1_TIME * next_update = X509_CRL_get0_nextUpdate(hSession->ssl.crl.cert); - if(X509_cmp_time(next_update, &now)) + if(X509_cmp_current_time(next_update)) { int day, sec; if(ASN1_TIME_diff(&day, &sec, NULL, next_update)) -- libgit2 0.21.2