proxy.certIgnoreTimestamp should only be downgradable

2019-10-18 20:30:41 +02:00 · 2019-10-18 20:30:41 +02:00 · bcaf0bca96
parent e5221167e1
commit bcaf0bca96
1 changed files with 6 additions and 2 deletions
--- a/dnscrypt-proxy/proxy.go
+++ b/dnscrypt-proxy/proxy.go
@ -157,7 +157,9 @@ func (proxy *Proxy) StartProxy() {
 		dlog.Fatal(err)
 	}
 	liveServers, err := proxy.serversInfo.refresh(proxy)
-	proxy.certIgnoreTimestamp = !(liveServers > 0)
+	if liveServers > 0 {
+		proxy.certIgnoreTimestamp = false
+	}
 	if proxy.showCerts {
 		os.Exit(0)
 	}
@ -180,7 +182,9 @@ func (proxy *Proxy) StartProxy() {
 				}
 				clocksmith.Sleep(delay)
 				liveServers, _ = proxy.serversInfo.refresh(proxy)
-				proxy.certIgnoreTimestamp = !(liveServers > 0)
+				if liveServers > 0 {
+					proxy.certIgnoreTimestamp = false
+				}
 			}
 		}()
 	}