Dr Stephen Henson wrote:
>
> Ben Laurie wrote:
> >
> > Richard Levitte - VMS Whacker wrote:
> > >
> > > ben> I know I shouldn't have left this until now, but I'd quite like to
> > > ben> commit this change I've accidentally left lying around, which allows a
> > > ben> certificate age check:
> > >
> > > I can't tell you what to do, but I'd prefer if you didn't before the
> > > release. Your call.
> >
> > Ah, but you can - or I wouldn't have asked. :-)
> >
>
> BTW you are assuming the certificate date is UTCTime, some examples
> exist that use GeneralizedTime...
I believe x509 (the program) was making the same assumption, but it
would be more correct to handle both, of course :-)
Cheers,
Ben.
--
SECURE HOSTING AT THE BUNKER: http://www.thebunker.net/hosting.htm
http://www.apache-ssl.org/ben.html
Coming to ApacheCon? http://ApacheCon.Com/
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]