Am 18.09.2014 um 20:03 schrieb Salz, Rich:
The default time comes from the gettimeofday() system call (see def_time_cb in 
ts_rsp_sign.c).
I don't see any openssl bug here.

It does, but I agree with the OP: the *textual formatting* of the fractional second in ./crypto/ts/ts_rsp_sign.c is wrong. It must include leading zeroes:

BIO_snprintf(p, 2 + precision, ".%06ld", usec);

instead of the current

BIO_snprintf(p, 2 + precision, ".%ld", usec);

There's a dot "." before the %ld, so any usec below 100000 would be incorrectly formatted.

Example:

usec=50000

Expected: .05
Real:     .5

Regards,

Rainer


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to