From: Dr. Stephen Henson <steve@openssl.org>
Date: Fri, 23 Sep 2011 13:39:23 +0000 (+0000)
Subject: PR: 2606
X-Git-Tag: OpenSSL-fips-2_0-rc1~123
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=c2035bffe79ef37382bebb7f18efaf8e8e4372ed;p=oweals%2Fopenssl.git

PR: 2606
Submitted by: Christoph Viethen <cv@kawo2.rwth-aachen.de>
Reviewed by: steve

Handle timezones correctly in UTCTime.
---

diff --git a/crypto/x509/x509_vfy.c b/crypto/x509/x509_vfy.c
index b32c47b31b..18048da68c 100644
--- a/crypto/x509/x509_vfy.c
+++ b/crypto/x509/x509_vfy.c
@@ -1774,7 +1774,7 @@ int X509_cmp_time(const ASN1_TIME *ctm, time_t *cmp_time)
 	atm.length=sizeof(buff2);
 	atm.data=(unsigned char *)buff2;
 
-	if (X509_time_adj(&atm,-offset*60, cmp_time) == NULL)
+	if (X509_time_adj(&atm, offset*60, cmp_time) == NULL)
 		return 0;
 
 	if (ctm->type == V_ASN1_UTCTIME)