X-Git-Url: https://ruderich.org/simon/gitweb/?a=blobdiff_plain;f=src%2Fverify.c;h=b6f1ff845aab14bb7a55c8d7106d8e09f63c1804;hb=2e96ede8aa7a32d840fa62fd8c4520960b69348d;hp=ab4499213c3f137f65e17623ed514563fc272066;hpb=f3ca90e517a9ae54e831e5a5b91fcc2afb9df5bf;p=tlsproxy%2Ftlsproxy.git

diff --git a/src/verify.c b/src/verify.c
index ab44992..b6f1ff8 100644
--- a/src/verify.c
+++ b/src/verify.c
@@ -55,10 +55,11 @@ int verify_tls_connection(gnutls_session_t session, const char *hostname) {
         return -1;
     }
     /* Definitely an invalid certificate, abort. */
-    if (status & GNUTLS_CERT_EXPIRED
-            || status & GNUTLS_CERT_REVOKED
+    if (status & GNUTLS_CERT_REVOKED
+            || status & GNUTLS_CERT_INSECURE_ALGORITHM
             || status & GNUTLS_CERT_NOT_ACTIVATED
-            || status & GNUTLS_CERT_INSECURE_ALGORITHM) {
+            || status & GNUTLS_CERT_EXPIRED
+            ) {
         LOG(WARNING, "verify_tls_connection(): invalid server certificate");
         return -1;
     }