Re: Millenium and 37 bug

2000-01-04 Thread Richard Levitte - VMS Whacker
andrew> Presumably the fix is to link against a library which has andrew> t_time defined as something larger (or at least unsigned) - andrew> does such a library exist? Yes. Solaris 7 (on Sparc) has 64 bit time_t, and thus the libc that comes with it does as well. I think that True64 Unix (on A

Re: Millenium and 37 bug

2000-01-04 Thread Ben Laurie
Rodney Thayer wrote: > > you should be able to go to at least 2049, as the PKIX limit > is around 2050. I know some vendors have tested this. PKIX is not limited to 2050, it simply changes format at that point. The problem is, presumably, that the date calculation is not carried out in an appro

Re: Millenium and 37 bug

2000-01-03 Thread Rodney Thayer
you should be able to go to at least 2049, as the PKIX limit is around 2050. I know some vendors have tested this. At 06:28 PM 1/3/00 +, Andrew Cooke wrote: >Hi, > >Not really a open-ssl bug, but it's interesting and I'm curious to hear >how people will be dealing with it: has anyone tried

Millenium and 37 bug

2000-01-03 Thread Andrew Cooke
Hi, Not really a open-ssl bug, but it's interesting and I'm curious to hear how people will be dealing with it: has anyone tried to make a certificate that lasts for the next century? We tried (just because we were fed up with test certificates expiring) and found that we couldn't get past 2037