(find_CMSIdentifier): require the certificate we are looking for to be valid.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19243 ec53bebd-3082-4978-b11e-865c3cabbd6b

lib/hx509/cms.c

@@ -222,6 +222,9 @@ find_CMSIdentifier(hx509_context context,
 
     q.match |= match;
 
+    q.match |= HX509_QUERY_MATCH_TIME;
+    q.timenow = time(NULL);
+
     ret = hx509_certs_find(context, certs, &q, &cert);
     if (ret == HX509_CERT_NOT_FOUND) {
 	char *str;