#16 GeneralizedTime-format breaks browsers

closed
nobody
None
8
2003-08-06
2003-08-05
No

When creating certificates with xca and using them in
httpd, browsers do not work correctly since the times
are specified in GeneralizedTime but not UTCTime.
Mozilla/Galeon refuses connection entirely and
konqueror and opera report dates around 2020. gnutls
reports 1970 as date, but its xml report shows the
correct times.

RFC 3280 states in section 4.1.2.5 Validity:

| CAs conforming to this profile MUST always encode
certificate
| validity dates through the year 2049 as UTCTime;
certificate validity
| dates in 2050 or later MUST be encoded as
GeneralizedTime.

Discussion

  • Christian Hohnstaedt

    • priority: 5 --> 8
    • status: open --> closed
     
  • Christian Hohnstaedt

    Logged In: YES
    user_id=609294

    fixed by converting them to UTC time if
    they are below 2049.

     

Get latest updates about Open Source Projects, Conferences and News.

Sign up for the SourceForge newsletter:





No, thanks