> do you realistically think we'll ever drop support for the -days argument
> though? Dropping -days would break a million scripts.
No, we'll never drop support for -days. But whether the code is atoi() or
atof() is a big difference and might cause important silent failures for new
scripts running on anything other than the most recent openssl. On most
systems atoi("0.5") returns 0 and no error indicator so "-days 0.5" would
silently do the wrong thing on anything other than openssl 1.0.whatever Which
seems much worse.
/r$
--
Principal Security Engineer
Akamai Technologies, Cambridge, MA
IM: rs...@jabber.me; Twitter: RichSalz
:��I"Ϯ��r�m����
(����Z+�7�zZ)���1���x ��h����W^��^��%�� ��&jם.+-1�ځ��j:+v�������h�
