Hodie IV Non. Mar. MMIX, Oliver Martin scripsit: > Am Wed, 4 Mar 2009 11:19:09 +0100 schrieb Erwann ABALEA: > > > RFC5280 is a *profile* of X.509, i.e. a subset; it cannot replace > > X.509. > > Non Zulu times, minute accuracy, and fractional seconds are accepted > > in X.509, why should it be refused by OpenSSL? > > Sorry, didn't know that. I looked for the full X.509 specification but > couldn't find it - it seems I would have to buy it from ITU.
No, it is downloadable for free, as the other useful specifications (X.501, X.520, X.680 and X.690 series). I have them downloaded from their website, both in english and french, as PDF files. > Does it allow GeneralizedTime for years between 1950 and 2049 too? Then Yes, it does. There's no mention of a GeneralizedTime's use forbidden to represent a date between 1950 and 2049. -- Erwann ABALEA <[email protected]> ----- If you never try anything new, you'll miss out on many of life's great disappointments. Demotivators, 2002 calendar ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected]
