Changeset 59676 in vbox

Timestamp:

Feb 15, 2016 12:14:31 PM (9 years ago)

Author:

vboxsync

Message:

RTCrX509CertPaths: Don't use ValidTime unless it's actually set.

File:

• trunk/src/VBox/Runtime/common/crypto/x509-certpaths.cpp (modified) (1 diff)

trunk/src/VBox/Runtime/common/crypto/x509-certpaths.cpp

@@ -2006 +2006 @@
      */
     AssertCompile(sizeof(pThis->szTmp) >= 36 * 3);
-    if (!RTCrX509Validity_IsValidAtTimeSpec(&pNode->pCert->TbsCertificate.Validity, &pThis->ValidTime))
+    if (   (pThis->fFlags & RTCRX509CERTPATHSINT_F_VALID_TIME)
+        && !RTCrX509Validity_IsValidAtTimeSpec(&pNode->pCert->TbsCertificate.Validity, &pThis->ValidTime))
         return rtCrX509CpvFailed(pThis, VERR_CR_X509_CPV_NOT_VALID_AT_TIME,
                                  "Certificate is not valid (ValidTime=%s Validity=[%s...%s])",