Hi.

I testing openssl for year 2000 compliance and I found following:
in "crypto/x509/x509_vfy.c"
int X509_cmp_current_time(ctm)
ASN1_UTCTIME *ctm;
        {
... Line 452:
        if (i < 70) i+=100;
...
in "crypto/asn1/t_x509.c"
int ASN1_UTCTIME_print(bp,tm)
BIO *bp;
ASN1_UTCTIME *tm;
        {
... Line 369
        if (y < 50) y+=100;
...

in index.txt (database file for CA)
V       000405121152Z           0       unknown  ... skipped
        ^^
My questions are: 
1. 50 or 70 I must compare with 2-digit year?
2. Is it normally "000405121152Z" in index.txt and are a problem in
future?

Thanks in advance.

Alexander Tyshlek
First Ukrainian International Bank
[EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to