1 files changed, 12 insertions, 9 deletions

diff --git a/src/lib/libcrypto/x509/x509_vfy.c b/src/lib/libcrypto/x509/x509_vfy.c
index f2dc356dc8..8d4d15668e 100644
--- a/src/lib/libcrypto/x509/x509_vfy.c
+++ b/src/lib/libcrypto/x509/x509_vfy.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509_vfy.c,v 1.44 2015/07/19 05:42:55 miod Exp $ */
+/* $OpenBSD: x509_vfy.c,v 1.45 2015/09/14 16:13:39 jsing Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -758,15 +758,17 @@ err:
 static int
 check_crl_time(X509_STORE_CTX *ctx, X509_CRL *crl, int notify)
 {
-        time_t *ptime;
+        time_t *ptime = NULL;
         int i;
 
-        if (notify)
-                ctx->current_crl = crl;
+        if (ctx->param->flags & X509_V_FLAG_NO_CHECK_TIME)
+                return (1);
+
         if (ctx->param->flags & X509_V_FLAG_USE_CHECK_TIME)
                 ptime = &ctx->param->check_time;
-        else
-                ptime = NULL;
+
+        if (notify)
+                ctx->current_crl = crl;
 
         i = X509_cmp_time(X509_CRL_get_lastUpdate(crl), ptime);
         if (i == 0) {
@@ -1489,13 +1491,14 @@ check_policy(X509_STORE_CTX *ctx)
 int
 x509_check_cert_time(X509_STORE_CTX *ctx, X509 *x, int quiet)
 {
-        time_t *ptime;
+        time_t *ptime = NULL;
         int i;
 
+        if (ctx->param->flags & X509_V_FLAG_NO_CHECK_TIME)
+                return (1);
+
         if (ctx->param->flags & X509_V_FLAG_USE_CHECK_TIME)
                 ptime = &ctx->param->check_time;
-        else
-                ptime = NULL;
 
         i = X509_cmp_time(X509_get_notBefore(x), ptime);
         if (i == 0) {