tyler.durden/icinga2
1
0
Fork 0
mirror of https://github.com/Icinga/icinga2.git synced 2025-09-26 11:08:51 +02:00
Code Issues Packages Projects Releases Wiki Activity

IsCertUptodate(): consider root certs created before 2017 up-to-date

Browse Source 
Only leaves created before 2017 should be renewed (yet).
This enables IsCertUptodate() for roots as expected.
This commit is contained in:
Alexander A. Klimov 2023-11-22 17:41:20 +01:00
parent b43f1e7706
commit 398dcf588e
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
lib/base/tlsutility.cpp
View File

@ -771,7 +771,9 @@ bool IsCertUptodate(X509* cert)
time_t forceRenewalEnd = 1483228800; /* January 1st, 2017 */
time_t renewalStart = now + RENEW_THRESHOLD;
return X509_cmp_time(X509_get_notBefore(cert), &forceRenewalEnd) != -1 && X509_cmp_time(X509_get_notAfter(cert), &renewalStart) != -1;
return (X509_cmp_time(X509_get_notBefore(cert), &forceRenewalEnd) != -1
|| !X509_NAME_cmp(X509_get_subject_name(cert), X509_get_issuer_name(cert)))
&& X509_cmp_time(X509_get_notAfter(cert), &renewalStart) != -1;
}
String CertificateToString(const std::shared_ptr<X509>& cert)