From 81ae53920e78f3d39d1429b62e24a2800931ba86 Mon Sep 17 00:00:00 2001 From: Andrew Pan Date: Wed, 10 Apr 2024 21:17:08 -0500 Subject: [PATCH] verifier: fixup time range check Signed-off-by: Andrew Pan --- src/verify/verifier.rs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/verify/verifier.rs b/src/verify/verifier.rs index 818888996a..ac4d4f62b3 100644 --- a/src/verify/verifier.rs +++ b/src/verify/verifier.rs @@ -160,7 +160,7 @@ impl AsyncVerifier { .not_after .to_unix_duration() .as_secs(); - if !(not_before <= integrated_time && integrated_time <= not_after) { + if integrated_time < not_before || integrated_time > not_after { return Err(CertificateErrorKind::Expired)?; } debug!("data signed during validity period");