generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Use X509_cmp_time() in -checkend option, to support GeneralizedTime.

Browse Source
This commit is contained in:
Dr. Stephen Henson
2004-12-05 18:26:19 +00:00
parent 41c70d47d7
commit a37e22d866
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
apps/x509.c
View File

@@ -999,9 +999,9 @@ bad:
if (checkend)
{
time_t tnow=time(NULL);
time_t tcheck=time(NULL) + checkoffset;
if (ASN1_UTCTIME_cmp_time_t(X509_get_notAfter(x), tnow+checkoffset) == -1)
if (X509_cmp_time(X509_get_notAfter(x), &tcheck) < 0)
{
BIO_printf(out,"Certificate will expire\n");
ret=1;