Commit a37e22d8 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Use X509_cmp_time() in -checkend option, to support GeneralizedTime.

parent 41c70d47

apps/x509.c

+2 −2
Original line number Diff line number Diff line
@@ -999,9 +999,9 @@ bad: 


	if (checkend)

		{

		time_t tnow=time(NULL);

		time_t tcheck=time(NULL) + checkoffset;



		if (ASN1_UTCTIME_cmp_time_t(X509_get_notAfter(x), tnow+checkoffset) == -1)

		if (X509_cmp_time(X509_get_notAfter(x), &tcheck) < 0)

			{

			BIO_printf(out,"Certificate will expire\n");

			ret=1;