Hosting Provided By

DO NOT REPLY [Bug 14104] New: - time zone discrepancy in evaluating CRL timeliness

From: <bugzilla(at)apache.org>
Date: Wed Oct 30 2002 - 17:30:09 EST

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT <http://nagoya.apache.org/bugzilla/show_bug.cgi?id=14104>. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_bug.cgi?id=14104

time zone discrepancy in evaluating CRL timeliness

           Summary: time zone discrepancy in evaluating CRL timeliness
           Product: Apache httpd-2.0
           Version: 2.0.43
          Platform: All
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: mod_ssl
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: lippard@discord.org

I run my local machine with a hardware time of GMT and a local time of US/Arizona (Mountain Standard), which is GMT -7.

When I generate a new CRL, the time in the CRL for last update and no update is in GMT. Output from openssl crl -text -noout -in crl.pem shows:

        Last Update: Oct 30 17:21:57 2002 GMT
        Next Update: Nov 29 17:21:57 2002 GMT

for a CRL created at 10:21:57 MST on October 30. However, mod_ssl says all client certificates are invalid until 17:21:57 MST:

[Wed Oct 30 15:14:01 2002] [warn] Found CRL is expired - revoking all
certificates until you get updated CRL
[Wed Oct 30 15:14:01 2002] [error] Certificate Verification: Error (12): CRL has
expired
[Wed Oct 30 15:14:01 2002] [error] Re-negotiation handshake failed: Not accepted
by client!?

mod_ssl seems to be taking the CRL date as MST instead of GMT.

(System is OpenBSD 3.1.)

To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org For additional commands, e-mail: bugs-help@httpd.apache.org Received on Wed Oct 30 22:29:13 2002

Do you need help?

This message: [ Message body ]
Next message: bugzilla(at)apache.org: "DO NOT REPLY [Bug 14109] New: - configure fails on aix 4.3.3"
Previous message: bugzilla(at)apache.org: "DO NOT REPLY [Bug 13986] - remove default MIME-type"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 16:44:01 EDT