> [[email protected] - Wed Mar 04 07:42:52 2009]: > > This patch adds support for GeneralizedTime for startdate/enddate in > openssl ca. I guess not too many people need certificates beyond 2049 > (or before 1950) right now, but having the capability surely can't hurt. > > Also, previously it accepted non-GMT times and values without seconds, > both of which are not allowed by RFC 5280 (and previous ones). This is > fixed too. >
IMHO a better way to implement this functionality is with a new function ASN1_TIME_set_string() which uses UTCTime/GeneralizedTime as appropriate. ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected]
