CVSROOT: /cvs Module name: src Changes by: t...@cvs.openbsd.org 2023/05/22 09:07:02
Modified files: usr.sbin/rpki-client: crl.c x509.c Log message: Convert x509_get_time() to ASN1_TIME_to_tm() Instead of using the LibreSSL-specific ASN1_time_parse(), we can use OpenSSL's ASN1_TIME_to_tm() which LibreSSL provides since 3.6.0. The latter has a few API quirks such as silently falling back to being a timegm() replacement if called with a NULL ASN1_TIME. We don't want that, so just return an error instead. rpki-client portable now needs LibreSSL >= 3.6. This is a small price to pay for rather significant smiplifications in regress and portable (which will be possible after the next commit). Also adjust a couple of error strings. ok claudio job