diff options
| author | Michael Brown | 2012-03-20 00:04:05 +0100 |
|---|---|---|
| committer | Michael Brown | 2012-03-20 00:14:17 +0100 |
| commit | 8583c323a25fd65fb6e7fe47e3e8b69d23acb2d3 (patch) | |
| tree | 9422d344ede255df558bb522615f8c11a0e5fcd8 /src/net | |
| parent | [tls] Parse X.509 validity times into seconds since the Epoch (diff) | |
| download | ipxe-8583c323a25fd65fb6e7fe47e3e8b69d23acb2d3.tar.gz ipxe-8583c323a25fd65fb6e7fe47e3e8b69d23acb2d3.tar.xz ipxe-8583c323a25fd65fb6e7fe47e3e8b69d23acb2d3.zip | |
[tls] Check certificate validity period against current date and time
Signed-off-by: Michael Brown <mcb30@ipxe.org>
Diffstat (limited to 'src/net')
| -rw-r--r-- | src/net/tls.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/net/tls.c b/src/net/tls.c index 276b23577..3aefb19de 100644 --- a/src/net/tls.c +++ b/src/net/tls.c @@ -1093,6 +1093,7 @@ static int tls_new_certificate ( struct tls_session *tls, struct x509_certificate cert; struct x509_name *name = &cert.subject.name; struct x509_public_key *key = &cert.subject.public_key; + time_t now; int rc; /* Sanity check */ @@ -1107,8 +1108,9 @@ static int tls_new_certificate ( struct tls_session *tls, context.tls = tls; context.current = certificate->certificates; context.end = end; + now = time ( NULL ); if ( ( rc = x509_validate_chain ( tls_parse_next, &context, - NULL, &cert ) ) != 0 ) { + now, NULL, &cert ) ) != 0 ) { DBGC ( tls, "TLS %p could not validate certificate chain: %s\n", tls, strerror ( rc ) ); return rc; |