Hello,

until now when i printed certificate chains (in verbose mode)
i used a brute simple hand driven function that dealt with
ASN1_UTCTIME.  Today i connected to a server where one of the
certificates in the chain used ASN1_GENERALIZEDTIME, which
resulted in the -- faulty -- message:

  notBefore = 2020-09-03 03:12:54 GMT
  notAfter = Bogus certificate date: 20240303125425Z

So i gave up on this and am now using the undocumented (at least
in regular documentation) ASN1_TIME_print(), which (sic) goes
through a BIO:

  notBefore = Mar  3 12:54:25 2009 GMT
  notAfter = Mar  3 12:54:25 2024 GMT

I'd prefer ISO 8601, but.. here we go.
And what would be so wrong with making asn1_XX_to_tm() public?
Thanks,

--steffen
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to