Background on this test failure.

The reason that the Heimdal 7.5.0 tests began to fail after they
previously succeeded is because the failing test relies upon an X.509
certificate that expired on March 4 2019.

Then post 7.5.0 support was added to support OpenSSL 1.1 which included
the ability to handle certificates with expiration dates post 19 Jan
2038 03:14:07 UTC.

Heimdal also updated the test suite certificates to last 500 years.
These certificates work fine on platforms with 64-bit time_t but on
platforms such as Debian Linux i386 where time_t is 32-bit, the tests
will fail.

There has been no code change to Heimdal and there is no intention to
replace the use of time_t within Heimdal for a Heimdal specific time
integer type within the Heimdal 7.x series.  Making such a change would
alter not only APIs but ABIs.  Its unclear when or if we could make such
a change for the same reasons that Debian cannot alter the size of
time_t on i386.

Jeffrey Altman
Heimdal Project Manager

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to