OpenBSD/src L9BPnVQusr.sbin/rpki-client mft.c

   Rewrite the time validity check for mfts. Using ASN1_GENERALIZEDTIME_print
   and strptime to convert the timestamp does not correctly account for the
   timezone. Instead use X509_cmp_time which later on should be replaced with
   ASN1_time_tm_cmp since the ASN1_STRING_cmp() check at the end will fail
   around 2049.

   Problem with timezone reported by Alexandre Hamada (hamada at registro.br).
   He also tested this diff.
   OK tb@
VersionDeltaFile
1.8+48-55usr.sbin/rpki-client/mft.c
+48-551 files

UnifiedSplitRaw