X-Git-Url: http://www.project-moonshot.org/gitweb/?a=blobdiff_plain;f=mech_eap%2Faccept_sec_context.c;h=d54ea482aef0e3a207675c19139292419ae2977d;hb=9cc755a4b69ceae4461aab1799b50a8d746d5f71;hp=a0421ea9c5a82b7c9061e7604cedd6779a494c98;hpb=265178b55bb8dc2770a64d118e0d3e7a638ae117;p=moonshot.git

diff --git a/mech_eap/accept_sec_context.c b/mech_eap/accept_sec_context.c
index a0421ea..d54ea48 100644
--- a/mech_eap/accept_sec_context.c
+++ b/mech_eap/accept_sec_context.c
@@ -121,6 +121,11 @@ acceptReadyEap(OM_uint32 *minor, gss_ctx_id_t ctx, gss_cred_id_t cred)
     if (GSS_ERROR(major))
         return major;
 
+    if (ctx->expiryTime < time(NULL)) {
+        *minor = GSSEAP_CRED_EXPIRED;
+        return GSS_S_CREDENTIALS_EXPIRED;
+    }
+
     *minor = 0;
     return GSS_S_COMPLETE;
 }