update timestamp

Signed-off-by: Patrick Zheng <[email protected]>
Two-Hearts · Jun 25, 2024 · ac78ce1 · ac78ce1
1 parent 3ad1246
commit ac78ce1
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/verifier/verifier.go b/verifier/verifier.go
@@ -655,11 +655,11 @@ func verifyAuthenticTimestamp(ctx context.Context, trustPolicy *trustpolicy.Trus
 			}
 		}
 		logger.Info("TSA identity is: ", tsaCertChain[0].Subject)
+		timeStampLowerLimit = ts.Add(-accuracy)
+		timeStampUpperLimit = ts.Add(accuracy)
 		// 4. Perform the timestamping certificate chain revocation check
 		if !trustPolicy.SignatureVerification.SkipTimestampRevocationCheck {
 			logger.Info("Checking timestamping certificate chain revocation...")
-			timeStampLowerLimit = ts.Add(-accuracy)
-			timeStampUpperLimit = ts.Add(accuracy)
 			certResults, err := revocation.ValidateTimestampCertChain(tsaCertChain, timeStampUpperLimit, &http.Client{Timeout: 5 * time.Second})
 			if err != nil {
 				return &notation.ValidationResult{