From: Dr. Stephen Henson <steve@openssl.org>
Date: Sun, 5 Dec 2004 18:26:19 +0000 (+0000)
Subject: Use X509_cmp_time() in -checkend option, to support GeneralizedTime.
X-Git-Tag: BEN_FIPS_TEST_6~14^2~3
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=a37e22d866294c25747b7546e6390bfe792fc3c5;p=oweals%2Fopenssl.git

Use X509_cmp_time() in -checkend option, to support GeneralizedTime.
---

diff --git a/apps/x509.c b/apps/x509.c
index b2288b69c2..294fc69573 100644
--- a/apps/x509.c
+++ b/apps/x509.c
@@ -999,9 +999,9 @@ bad:
 
 	if (checkend)
 		{
-		time_t tnow=time(NULL);
+		time_t tcheck=time(NULL) + checkoffset;
 
-		if (ASN1_UTCTIME_cmp_time_t(X509_get_notAfter(x), tnow+checkoffset) == -1)
+		if (X509_cmp_time(X509_get_notAfter(x), &tcheck) < 0)
 			{
 			BIO_printf(out,"Certificate will expire\n");
 			ret=1;