Allow certificate upload for "not yet valid" case
The "certificate is not yet valid" case the notBefore date is
after the current time. This change will help to user to upload
the certificate with "notBefore" date after current time.
Change-Id: If85aa5c7649cc540dfbc0d14261715d27ad7f075
Signed-off-by: Jayanth Othayoth <ojayanth@in.ibm.com>
diff --git a/certs_manager.cpp b/certs_manager.cpp
index 4ebf71c..a4f9116 100644
--- a/certs_manager.cpp
+++ b/certs_manager.cpp
@@ -39,7 +39,8 @@
{
// Verify the certificate file
auto rc = verifyCert(path);
- if (rc != X509_V_OK)
+ // Allow certificate upload, for "certificate is not yet valid" case.
+ if (!((rc == X509_V_OK) || (rc == X509_V_ERR_CERT_NOT_YET_VALID)))
{
if (rc == X509_V_ERR_CERT_HAS_EXPIRED)
{