CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/05/28 22:12:22
Modified files:
usr.sbin/acme-client: revokeproc.c
Log message:
acme-client: fix timegm(3) invocations
Use the tm.tm_wday = -1 sentinel check and switch X509notbefore() and
X509notafter() to use a time_t * output parameter since an in-band error
doesn't work for them for the same reason it doesn't work for timegm(3).
The error check remains against -1 to keep the diff small, but should
perhaps be changed to use a Boolean 0/1 approach.
Of course, with the aggressive push to very short-lived certificates in
the WebPKI, negative epoch times won't happen here in practice.
ok florian
