Hello OpenSSL-Developers !

While playing with "ca" in openssl-SNAP-20000209 i recognize that the value
of days is not printed correct during certification, e.g.:

Using the following command to sign a request

openssl ca -in req.pem -out cert.pem -outdir certs \
           -startdate 000212121212Z -enddate 010212121212Z

yields 

...
Certificate is to be certified until Feb 12 12:12:12 2001 GMT (730 days)
                                                               ^^^

Looking in ca.c:
If -days wasn´t set in the above ca-command it always gets the value of
default_days in openssl.cnf (if (days == 0)..., around line 783). At line
1733 (if(days) BIO_printf(bio_err," (%d days)",days);) the value of days
will be printed regardless of a start- and enddate. 

The certificate itself contains the correct validity period.


BTW:

Is it possible to modify make install so it checks if the required
man-directories available and if not create them ?  
If would make it easier to install openssl in unusual directories.

-- 
Ciao,

   Lars    <[EMAIL PROTECTED]>
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to