Working on code to read/process and create x509 certificates I encountered the following.
The following code results in an ASN1_TIME structure with internal length field of 14 (date1->length =14). date1 = ASN1_TIME_new(); ASN1_GENERALIZEDTIME_set_string(date1, "20020819093712"); When extracting time out an existing certificate however with this date/time would result in a length field of 15 (date2->length = 15). ASN1_GENERALIZEDTIME *date2 = ASN1_TIME_to_generalizedtime (X509_get_notBefore(cert), NULL); Consequently ASN1_STRING_cmp(date1, date2) fails, although the strings are exactly the same, 14 characters that make up the date, followed by \0. Have I missed something or is there a bug somewhere? Paul ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]