hello,
according to the following asn.1 structure, a time string storing validity
information in a x509 certificate can be given in two ways:

[snip]
Validity ::= SEQUENCE {
        notBefore               Time,
        notAfter                Time
        }
 
Time ::= CHOICE {
        utcTime                 UTCTime,
        generalTime             GeneralizedTime
        }
[snap]

well, i guess UTCTime is a string of seconds reprasentating the seconds
passed from 1.1.1900 untill today. but what is the excat format of a
GeneralizedTime string? can openssl handle GeneralizedTime strings (i guess it can ;-) 
)?
i tried to put a string like "20040323050505Z" into this field, but "openssl
x509 -in certificate.pem -text -noout" gave me back some date in 1969. well,
what am i doing wrong in general? and in particular, do i have to decrease
the month by 1, so that for example march would be reprasentated by "02"?

thanx for help,
claus 

-- 
+++ NEU bei GMX und erstmalig in Deutschland: T�V-gepr�fter Virenschutz +++
100% Virenerkennung nach Wildlist. Infos: http://www.gmx.net/virenschutz

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to