Ben Laurie wrote:
>
> Dr Stephen Henson wrote:
> >
> >
> > BTW you are assuming the certificate date is UTCTime, some examples
> > exist that use GeneralizedTime...
>
> I believe x509 (the program) was making the same assumption, but it
> would be more correct to handle both, of course :-)
>
It was but that was (hopefully) fixed a while ago. It now uses ASN1_TIME
which is a choice of UTCTime and GeneralizedTime.
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
