Branch: Tag:

2014-04-21

2014-04-21 17:45:49 by Martin Nilsson <nilsson@opera.com>

Only check system time once per chain verification.

1353:       // Chain is now reversed so root is first and leaf is last.    +  int my_time = time();    foreach(chain_obj; int idx; TBSCertificate tbs)    {    array(Verifier)|Verifier verifiers;
1417:       else // otherwise, we make sure the chain is unbroken.    { -  // is the certificate in effect (time-wise)? -  int my_time = time(); -  +     // Check not_before. We want the current time to be later.    if(my_time < tbs->not_before)    ERROR(CERT_TOO_NEW);