PR: 2606
authorDr. Stephen Henson <steve@openssl.org>
Fri, 23 Sep 2011 13:39:45 +0000 (13:39 +0000)
committerDr. Stephen Henson <steve@openssl.org>
Fri, 23 Sep 2011 13:39:45 +0000 (13:39 +0000)
Submitted by: Christoph Viethen <cv@kawo2.rwth-aachen.de>
Reviewed by: steve

Handle timezones correctly in UTCTime.

crypto/x509/x509_vfy.c

index 5a0b0249b40c8eef0272e163a850f9a9bf570ec4..701ec565e933ccb7ca8d2b74e79f0032d80653d2 100644 (file)
@@ -1732,7 +1732,7 @@ int X509_cmp_time(const ASN1_TIME *ctm, time_t *cmp_time)
        atm.length=sizeof(buff2);
        atm.data=(unsigned char *)buff2;
 
-       if (X509_time_adj(&atm,-offset*60, cmp_time) == NULL)
+       if (X509_time_adj(&atm, offset*60, cmp_time) == NULL)
                return 0;
 
        if (ctm->type == V_ASN1_UTCTIME)