patch-security.patch
security/classes/Verifica_Certificado.php | ||
---|---|---|
113 | 113 |
$crl = file_get_contents($pcrl,true); |
114 | 114 |
$cert_data = Crl_parseASN($crl); |
115 | 115 |
# testa se crl expirada.... |
116 |
if(gmdate('YmdHis') >= data_hora($cert_data[1][0][1][4][1])) |
|
116 |
if(gmdate('YmdHis', time() + 3600*(-3 + date("I"))) >= data_hora($cert_data[1][0][1][4][1]))
|
|
117 | 117 |
{ |
118 | 118 |
# Se crl expirada, assume certificado revogado.. |
119 | 119 |
$this->erros_ssl[]= 'Couldn\'t verify if certificate was revoked.(CD-02)'; //'Arquivo CRL expirado.'; |