diff options
Diffstat (limited to 'lib/crypto/pkcs7_verify.c')
| -rw-r--r-- | lib/crypto/pkcs7_verify.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/lib/crypto/pkcs7_verify.c b/lib/crypto/pkcs7_verify.c index 54c677bcad..82c5c745d4 100644 --- a/lib/crypto/pkcs7_verify.c +++ b/lib/crypto/pkcs7_verify.c @@ -529,6 +529,7 @@ static int pkcs7_verify_one(struct pkcs7_message *pkcs7, if (sinfo->signing_time < sinfo->signer->valid_from || sinfo->signing_time > sinfo->signer->valid_to) { pr_warn("Message signed outside of X.509 validity window\n"); + return -EKEYREJECTED; } } |