Re: X509_cmp_time (possible) bug

Daniel Kahn Gillmor <[email protected]> Mon, 11 Sep 2017 10:43:27 -0400

Newsgroups	gmane.comp.encryption.openssl.devel
Message-ID	<[email protected]>

On Mon 2017-09-11 14:16:11 +0000, Short, Todd via openssl-dev wrote:
> Yes, it’s annoying, but it’s historic. I looked into changing this at one point.

I think Dimitry's point was that the documentation doesn't match the
implementation because of the flexibility of strcmp's defined return
code.

However, i think commit 80770da39ebba0101079477611b7ce2f426653c5 ("X509
time: tighten validation per RFC 5280") resolves Dmitry's concerns.

        --dkg
-- 
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev