diff options
| author | Ryan Kelley <ryan.parker.kelley@gmail.com> | 2022-08-16 08:28:50 +0300 |
|---|---|---|
| committer | Pauli <pauli@openssl.org> | 2022-08-23 04:05:54 +0300 |
| commit | 9eae491721209f302a9a475bffd271370e8bcb8f (patch) | |
| tree | 44cd8854f185b699927d0c3927941d15fd7b6713 | |
| parent | 07ecb790b02c0e8781ae591e7efb2a4f93177354 (diff) | |
Moving notify check after the no time check
CLA: trivial
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/19007)
(cherry picked from commit c92c3dfb99485eb2cfb840e92bd0ece8cdd72d0c)
| -rw-r--r-- | crypto/x509/x509_vfy.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/crypto/x509/x509_vfy.c b/crypto/x509/x509_vfy.c index b18489f67f..925fbb5412 100644 --- a/crypto/x509/x509_vfy.c +++ b/crypto/x509/x509_vfy.c @@ -973,14 +973,14 @@ static int check_crl_time(X509_STORE_CTX *ctx, X509_CRL *crl, int notify) time_t *ptime; int i; - if (notify) - ctx->current_crl = crl; if (ctx->param->flags & X509_V_FLAG_USE_CHECK_TIME) ptime = &ctx->param->check_time; else if (ctx->param->flags & X509_V_FLAG_NO_CHECK_TIME) return 1; else ptime = NULL; + if (notify) + ctx->current_crl = crl; i = X509_cmp_time(X509_CRL_get0_lastUpdate(crl), ptime); if (i == 0) { |