From 88baf053cd0e282366a618d9de955ab77063ce10 Mon Sep 17 00:00:00 2001
From: Jaakko Keränen <jaakko.keranen@iki.fi>
Date: Sun, 7 Mar 2021 14:00:23 +0200
Subject: GmCerts: Fixed checking for expiration time

---
 src/gmcerts.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'src/gmcerts.c')

diff --git a/src/gmcerts.c b/src/gmcerts.c
index 8c011137..cf4d7d2d 100644
--- a/src/gmcerts.c
+++ b/src/gmcerts.c
@@ -396,7 +396,7 @@ iBool checkTrust_GmCerts(iGmCerts *d, iRangecc domain, const iTlsCertificate *ce
     if (trust) {
         /* We already have it, check if it matches the one we trust for this domain (if it's
            still valid. */
-        if (!isAuth && elapsedSeconds_Time(&trust->validUntil) > 0) {
+        if (!isAuth && elapsedSeconds_Time(&trust->validUntil) < 0) {
             /* Trusted cert is still valid. */
             const iBool isTrusted = cmp_Block(fingerprint, &trust->fingerprint) == 0;
             unlock_Mutex(d->mtx);
-- 
cgit v1.2.3