Hi Steve,
Dr. Stephen Henson wrote:
On Wed, Sep 15, 2004, Goetz Babin-Ebell wrote:
Would something like the attached patch be acceptable ? (please ignore versin info in the diff)
This patch also adds checking of the revokation time against the checkTime
I'm not sure about that last bit and timezones. Although RFC3280 et al prohibit CAs from using timezones its not clear whether an implementation has to process them correctly.
Ough. OK, better safe than sorry...
The current code does by virtue of the way it can add
and subtract timezone offsets from the check time.
However something better would be needed to compare two ASN1_TIME structures.
Has anybody done an ASN1_TIME_cmp() already ?
I'll look into it...
Bye
Goetz
-- Goetz Babin-Ebell, software designer, TC TrustCenter AG, Sonninstr. 24-28, 20097 Hamburg, Germany Office: +49-(0)40 80 80 26 -0, Fax: +49-(0)40 80 80 26 -126 www.trustcenter.de www.betrusted.com
smime.p7s
Description: S/MIME Cryptographic Signature
