From 029ac17b40bd7ecd61f34eb6b348dc8e87ed5b94 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ram=C3=B3n=20Garc=C3=ADa?= <ramon.garcia.f@gmail.com>
Date: Tue, 18 Mar 2025 09:48:07 +0100
Subject: [PATCH] gpgsm: When selecting certs also skip certificates too young.

* sm/certlist.c (gpgsm_add_to_certlist): Also check for not yet valid
certs.
---
 sm/certlist.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/sm/certlist.c b/sm/certlist.c
index 3c3993058..549aaa726 100644
--- a/sm/certlist.c
+++ b/sm/certlist.c
@@ -395,7 +395,8 @@ gpgsm_add_to_certlist (ctrl_t ctrl, const char *name, int secret,
                   else
                     wrong_usage = rc;
                 }
-              else if (gpg_err_code (rc) == GPG_ERR_CERT_EXPIRED)
+              else if (gpg_err_code (rc) == GPG_ERR_CERT_EXPIRED
+                       || gpg_err_code (rc) == GPG_ERR_CERT_TOO_YOUNG)
                 {
                   ksba_cert_release (cert);
                   cert = NULL;