mbedtls: add error message for cert validity starting in the future

Closes #4552
curl · Nov 2, 2019 · 9910d6b · 9910d6b
1 parent 9c49824
commit 9910d6b
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/lib/vtls/mbedtls.c b/lib/vtls/mbedtls.c
@@ -588,6 +588,9 @@ mbed_connect_step2(struct connectdata *conn,
     else if(ret & MBEDTLS_X509_BADCERT_NOT_TRUSTED)
       failf(data, "Cert verify failed: BADCERT_NOT_TRUSTED");
 
+    else if(ret & MBEDTLS_X509_BADCERT_FUTURE)
+      failf(data, "Cert verify failed: BADCERT_FUTURE");
+
     return CURLE_PEER_FAILED_VERIFICATION;
   }