generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Use X509_cmp_time() in -checkend option, to support GeneralizedTime.

Browse Source
This commit is contained in:
Dr. Stephen Henson 2004-12-05 18:26:19 +00:00
parent 41c70d47d7
commit a37e22d866
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
apps/x509.c
View File

@ -999,9 +999,9 @@ bad:
if (checkend) if (checkend)
{ {
time_t tnow=time(NULL); time_t tcheck=time(NULL) + checkoffset;
if (ASN1_UTCTIME_cmp_time_t(X509_get_notAfter(x), tnow+checkoffset) == -1) if (X509_cmp_time(X509_get_notAfter(x), &tcheck) < 0)
{ {
BIO_printf(out,"Certificate will expire\n"); BIO_printf(out,"Certificate will expire\n");
ret=1; ret=1;