CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/05/27 07:57:16
Modified files:
usr.sbin/rpki-client: x509.c
Log message:
rpki-client: use sentinel idiom for timegm(3) error check
We currently fail on ASN.1 times before the epoch. There is nothing wrong
in principle with those. Both UTCTime and GeneralizedTimes can represent
such times and we should be able to accept them.
Modern OpenSSL and LibreSSL ensure in ASN1_TIME_to_tm() that the times are
well formed according to the DER, so this call is really only a translation
step.
ok claudio deraadt
