X-Git-Url: https://git.openssl.org/?p=openssl.git;a=blobdiff_plain;f=test%2Fpkits-test.pl;h=5c6b89fcdb0ae6efc9cf29076705f2e18d7a0b0b;hp=3f8579372b8f088084509da00c3111e09dba42f5;hb=61986d32f37cbaeaed08bd955ff27d35b72ea29a;hpb=3bfe583b8dcf3c3841ca0f6c2bd391f647e48dd8

diff --git a/test/pkits-test.pl b/test/pkits-test.pl
index 3f8579372b..5c6b89fcdb 100644
--- a/test/pkits-test.pl
+++ b/test/pkits-test.pl
@@ -784,8 +784,15 @@ my $ossl = "ossl/apps/openssl";
 
 my $ossl_cmd = "$ossl_path cms -verify -verify_retcode ";
 $ossl_cmd .= "-CAfile pkitsta.pem -crl_check_all -x509_strict ";
-# Uncomment out following line to use older data (uses Dec 10 00:29:26 2010)
-# $ossl_cmd .= "-attime 1291940972 ";
+
+# Check for expiry of trust anchor
+system "$ossl_path x509 -inform DER -in $pkitsta -checkend 0";
+if ($? == 256)
+	{
+	print STDERR "WARNING: using older expired data\n";
+	$ossl_cmd .= "-attime 1291940972 ";
+	}
+
 $ossl_cmd .= "-policy_check -extended_crl -use_deltas -out /dev/null 2>&1 ";
 
 system "$ossl_path x509 -inform DER -in $pkitsta -out pkitsta.pem";