OK thanks,
initial implementation of STORE into my pkcs11 engine (1) is ready.
I am able to do this openssl storeutl -engine pkcs11
'pkcs11:objecttype=cert;object=test'
and this is result:
engine "pkcs11" set.
0: Certificate
-BEGIN CERTIFICATE-
MIIC/DCCAeSgAwIBAgIUDrAyYf/dMsavGGEuYMLqJxFrH
Hi Erwann,
On 07/03/19 11:35, Erwann Abalea via openssl-users wrote:
Bonjour,
Here, reject the certificate is the correct behaviour, IMO.
UTCTime/GeneralizedTime are defined in X.680.
UTCTime:
- can have no timezone information, or have Z, of have a timezone offset
(with hours and minutes)