Diego I. Rosso wrote:
Anyone know why all my certificates are created, revoked, etc.. with a different hour than machine's (Exactly 3 hours, it could GMT or something like that?) Where can i check that or correct?usaly it is mentioned inside the certificate which relation and which timebase is used:
Valid From Jun 3 23:57:51 2004 GMT Expiration on Jun 3 23:57:51 2005 GMT
so you see GMT ;o) so that means its 'different' from your local time but not really if you issue it at a specific local time this is 'just' transformed to the general GMT without any +/-
but one have to keep that in meind if he reads the time and looks at his whatch... yeah ;o)
becouse the offset of your time to gmt you know
but if someone in a different timezone uses a cert, he doesn't necessery know - even if its stated there, so its simple just to add correction of its own timezone to gmt, than to calculate to the difference to the issuing timezone - i think, so simple everybody uses gmt for certs
so rfc3280 [http://rfc.sunsite.dk/rfc/rfc3280.html] says:
4.1.2.5 Validity
The certificate validity period is the time interval during which the CA warrants that it will maintain information about the status of the certificate. The field is represented as a SEQUENCE of two dates: the date on which the certificate validity period begins (notBefore) and the date on which the certificate validity period ends (notAfter). Both notBefore and notAfter may be encoded as UTCTime or GeneralizedTime.
CAs conforming to this profile MUST always encode certificate validity dates through the year 2049 as UTCTime; certificate validity dates in 2050 or later MUST be encoded as GeneralizedTime.
The validity period for a certificate is the period of time from notBefore through notAfter, inclusive.
greetings dalini
------------------------------------------------------- This SF.Net email is sponsored by: GNOME Foundation Hackers Unite! GUADEC: The world's #1 Open Source Desktop Event. GNOME Users and Developers European Conference, 28-30th June in Norway http://2004/guadec.org _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
