On Wed, Jul 16, 2014 at 05:46:42PM +0200, Daniel Kahn Gillmor via RT wrote:
> From experimentation, i just discovered that
> -days is also happy to accept and interpret negative integer arguments
> as well, resulting in a key with ValidNotBefore later than ValidNotAfter
That's a useful feature, at least for testing, certificate verification
engines, you get what you ask for. Tools that prevent you from asking
for the "wrong" thing without recourse are worse.
--
Viktor.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev@openssl.org
Automated List Manager majord...@openssl.org
