>My questions are:
>1. 50 or 70 I must compare with 2-digit year?
It's 50, 70 is a carryover from older versions of SSLeay.
>2. Is it normally "000405121152Z" in index.txt and are a problem in future?
This is a known problem. From the X.509 style guide:
>In coming up with the worlds least efficient machine-readable time encoding
>format, the ISO nevertheless decided to forgo the encoding of centuries, a
>problem which has been kludged around by redefining the time as UTCTime if
>the date is 2049 or ealier, and GeneralizedTime if the date is 2050 or later
>(the original plan was to cut over in 2015, but it was felt that moving it
>back to 2050 would ensure that the designers were either retired or dead by
>the time the issue became a serious problem). To decode a date, if it's
>UTCTime and the year is less than or equal to 49 it's 20xx, if it's UTCTime
>and the year is equal to or greater than 50 it's 19xx, and if it's
>GeneralizedTime it's encoded properly (but shouldn't be used for dates before
>2050). Yuck.
Peter.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
