CVSROOT: /cvs Module name: src Changes by: [email protected] 2024/02/03 17:53:27
Modified files:
usr.sbin/rpki-client: mft.c
Log message:
Use x509_get_time() to get the Manifest thisUpdate / nextUpdate
>From the moment d2i_Manifest() was introduced, it was automatically
checked whether the thisUpdate/nextUpdate are ASN1_GENERALIZEDTIME.
Unfortunately, an additional check is needed, because OpenSSL doesn't
require RFC 5280 conformance for GeneralizedTime DER encoding.
OK tb@
