|
Hi,
I'm using Openssl 0.9.6g on
Linux. After I've revoked a certificate and generated a CRL, I was wonder what
time source did the Openssl get to stamp in the CRL. After I generated the CRL,
I used "asn1parse" to dump the CRL into ASN1 then in the CRL time
section the openssl used my system time + the time zone, which
the system time it got is already plus the time zone.
For example:
my sytem time is:
$ date
Wed Oct 16 13:00:00 GMT+7 2002
but the time obtained from asn1parse of CRL
is
UTCTIME 021016200000Z
which is my
system time + 7 (time zone). It should be 13:00:00 only.
When I put that CRL in M$ Windows2K and 98 it shows
the CRL tme as:
Thu Oct 17 2002 03:00:00
which is the time of the CRL + 7 (time zone). Then
the time of the CRL that will be used on M$ will be 14 hrs later than the real
time.
So I try to change the Timezone in M$ back to GMT-7
the CRL shows the right time (as same as on Linux).
So how did the Openssl get the time source for
stamping the CRL? and to get the right time (as current time) how should I set
the system time?
Thanks,
Sorot P.
|
