diff mbox series

Fix usage of CONFIG_CMS_IGNORE_EXPIRED_CERTIFICATE

Message ID 1507652749-9860-1-git-send-email-sbabic@denx.de
State Accepted
Headers show
Series Fix usage of CONFIG_CMS_IGNORE_EXPIRED_CERTIFICATE | expand

Commit Message

Stefano Babic Oct. 10, 2017, 4:25 p.m. UTC 
Commit 764de5e69d2cc47df0adbc047ebe8714b1b9ed6b introduces a way to disable
if a certificate is elapsed. However, CONFIG_CMS_IGNORE_CERTIFICATE_PURPOSE
was used instead.

Signed-off-by: Stefano Babic <sbabic@denx.de>
Reported-by: Lars Lockenvitz <Lars.Lockenvitz@smartray.de>
CC: Lars Lockenvitz <Lars.Lockenvitz@smartray.de>
---
 corelib/verify_signature.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
diff mbox series

Patch

diff --git a/corelib/verify_signature.c b/corelib/verify_signature.c
index 3e50061..0596578 100644
--- a/corelib/verify_signature.c
+++ b/corelib/verify_signature.c
@@ -212,7 +212,7 @@  static int cms_verify_callback(int ok, X509_STORE_CTX *ctx) {
 
 	if (!ok) {
 		switch (cert_error) {
-#if defined(CONFIG_CMS_IGNORE_CERTIFICATE_PURPOSE)
+#if defined(CONFIG_CMS_IGNORE_EXPIRED_CERTIFICATE)
 		case X509_V_ERR_CERT_HAS_EXPIRED:
 		case X509_V_ERR_CERT_NOT_YET_VALID:
 			ok = 1;