notBefore and notAfter don't work correctly in non-zero timezones
Bug #1459918 reported by
Stanislaw Pitucha
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Anchor |
Fix Released
|
High
|
Stanislaw Pitucha | ||
Bug Description
Since SSL 0.9.6 the time retrieved from notBefore and notAfter is ASN1_TIME, not ASN1_UTCTIME. There's also an issue with converting the values into timestamps. This results in before/after checks being broken and test_{get,
Usually servers will run at UTC, so that's terrible in practice, but still a real issue.
| Changed in anchor: | |
| assignee: | nobody → Stanislaw Pitucha (stanislaw-pitucha) |
| Changed in anchor: | |
| status: | New → In Progress |
| Changed in anchor: | |
| importance: | Undecided → High |
| Changed in anchor: | |
| status: | In Progress → Fix Committed |
| Changed in anchor: | |
| status: | Fix Committed → Fix Released |
To post a comment you must log in.
