CVSROOT: /cvs
Module name: src
Changes by: t...@cvs.openbsd.org 2022/12/15 10:36:56
Modified files:
usr.sbin/acme-client: revokeproc.c
Log message:
acme-client: use timegm() instead of mktime()
Times in certificates are all expressed in Zulu time, so calling the time
zone dependent mktime() on such a time and comparing it to time(NULL) is
wrong.
This means that the check of at least 30 days validity and deciding on
whether to renew or not might have been off by by half a day depending on
where you are. That should not matter since you (or cron) are supposed to
run acme-client way more often than once a month.
ok claudio millert
