OpenBSD/src L9BPnVQ — usr.sbin/rpki-client mft.c
Rewrite the time validity check for mfts. Using ASN1_GENERALIZEDTIME_print and strptime to convert the timestamp does not correctly account for the timezone. Instead use X509_cmp_time which later on should be replaced with ASN1_time_tm_cmp since the ASN1_STRING_cmp() check at the end will fail around 2049. Problem with timezone reported by Alexandre Hamada (hamada at registro.br). He also tested this diff. OK tb@
Version | Delta | File | |
---|---|---|---|
1.8 | +48 | -55 | usr.sbin/rpki-client/mft.c |
+48 | -55 | 1 files |