upstream/certbot
1
0
Fork 0
mirror of https://github.com/certbot/certbot.git synced 2026-06-06 07:12:54 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

slight tolerance for requests timestamped in the future

Browse source
This commit is contained in:
Seth Schoen 2012-07-12 12:38:13 -07:00
parent d54858689a
commit f907899358
1 changed files with 5 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
server-ca/chocolate.py
View file

@ -211,8 +211,11 @@ class session(object):
if not all([safe("recipient", recipient), safe("csr", csr)]):
self.die(r, r.BadRequest, uri="https://ca.example.com/failures/illegalcharacter")
return
if timestamp > time.time() or time.time() - timestamp > 100:
self.die(r, r.BadRequest, uri="https://ca.example.com/failures/time")
if timestamp - time.time() > 5:
self.die(r, r.BadRequest, uri="https://ca.example.com/failures/future")
return
if time.time() - timestamp > 100:
self.die(r, r.BadRequest, uri="https://ca.example.com/failures/past")
return
if recipient != "ca.example.com":
self.die(r, r.BadRequest, uri="https://ca.example.com/failures/recipient")