[I'm resending this because I don't think it got out the last time]

>Yes, SSLeay is y2k safe.  The only place this could affect things is in the
>certificate code and I do allow for 01 == 2001.  The only other thing that is
>a problem is the unix time == seconds since 1970.  This will overflow in
>2037(?) and as such and certificates to be signed greater than this will stuff
>up.  I am looking at fixing this.
 
Are you still using a 100-year window since 1970 for the switchover?  I seem to
recall seeing that a long time ago, you should really switch over in 2050
rather than 2070.
 
As for > 2038 certs, these do exist.  MS in their infinite wisdom give certs
generated with their MakeCert utility a default validity of (get ready for
this) 40 years(!!).  However MakeCert's certs are otherwise so comprehensively
broken that I don't know if it's worth bothering even trying to read them.
 
Peter.
 

+-------------------------------------------------------------------------+
| Administrative requests should be sent to [EMAIL PROTECTED] |
| List service provided by Open Software Associates, http://www.osa.com/  |
+-------------------------------------------------------------------------+

Reply via email to