oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

hx509: For times before 2050 use UTCTime (fix pasto)

Browse Source
This commit is contained in:
Nicolas Williams
2021-08-25 22:49:14 -05:00
parent 041907d517
commit e6283e2d3f
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
lib/hx509/ca.c
View File

@@ -1763,6 +1763,8 @@ ca_sign(hx509_context context,
* are encoded in either UTCTime or GeneralizedTime. * are encoded in either UTCTime or GeneralizedTime.
* *
* 2524608000 is seconds since the epoch for 2050-01-01T00:00:00Z. * 2524608000 is seconds since the epoch for 2050-01-01T00:00:00Z.
*
* Both, ...u.generalTime and ...u..utcTime are time_t.
*/ */
if (notBefore < 1 || (int64_t)notBefore < 2524608000) if (notBefore < 1 || (int64_t)notBefore < 2524608000)
tbsc->validity.notBefore.element = choice_Time_utcTime; tbsc->validity.notBefore.element = choice_Time_utcTime;
@@ -1770,7 +1772,7 @@ ca_sign(hx509_context context,
tbsc->validity.notBefore.element = choice_Time_generalTime; tbsc->validity.notBefore.element = choice_Time_generalTime;
tbsc->validity.notBefore.u.generalTime = notBefore; tbsc->validity.notBefore.u.generalTime = notBefore;
if (notAfter < 1 || (int64_t)notBefore < 2524608000) if (notAfter < 1 || (int64_t)notAfter < 2524608000)
tbsc->validity.notAfter.element = choice_Time_utcTime; tbsc->validity.notAfter.element = choice_Time_utcTime;
else else
tbsc->validity.notAfter.element = choice_Time_generalTime; tbsc->validity.notAfter.element = choice_Time_generalTime;