Rudolf Polzer <rpol...@google.com> wrote: > Also, while at it - apparently hour 24 is allowed by ISO 8601 too as long as > minutes and seconds are zero, leading to even more non-canonicality... can > you check whether this is also valid ASN.1 then?
Sorry, I missed this bit. The ASN.1 spec says that GeneralizedTime is ISO 8601 format. > > It's not entirely clear that ASN.1 expects it, but we can relax the > > seconds check slightly for GeneralizedTime. What I'm not sure of is whether other ASN.1 implementations will expect it. David -- To unsubscribe from this list: send the line "unsubscribe linux-security-module" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html