CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2019/10/23 01:36:29
Modified files:
usr.sbin/rpki-client: mft.c
Log message:
Rewrite the time validity check for mfts. Using ASN1_GENERALIZEDTIME_print
and strptime to convert the timestamp does not correctly account for the
timezone. Instead use X509_cmp_time which later on should be replaced with
ASN1_time_tm_cmp since the ASN1_STRING_cmp() check at the end will fail
around 2049.
Problem with timezone reported by Alexandre Hamada (hamada at registro.br).
He also tested this diff.
OK tb@
