https://telecominfraproject.atlassian.net/browse/WIFI-7831

Signed-off-by: stephb9959 <[email protected]>
Telecominfraproject · Sep 26, 2023 · 673f506 · 673f506
1 parent ac078ec
commit 673f506
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/RADSEC_server.h b/src/RADSEC_server.h
@@ -303,6 +303,12 @@ namespace OpenWifi {
 				DecodeFile(CertFile_.path(), Server_.radsecCert);
 				DecodeFile(KeyFile_.path(), Server_.radsecKey);
 
+				Poco::Crypto::X509Certificate	Cert(CertFile_.path());
+				if(IsExpired(Cert)) {
+					poco_error(Logger_, fmt::format("Certificate for {} has expired. We cannot connect to this server.", Server_.name));
+					return false;
+				}
+
 				for (auto &cert : Server_.radsecCacerts) {
 					CaCertFiles_.emplace_back(
 						std::make_unique<Poco::TemporaryFile>(MicroServiceDataDirectory()));