Hosting Provided By

Re: [Users] freeswan-certificate problem

From: Andreas Steffen <andreas.steffen(at)strongsec.net>
Date: Wed Mar 31 2004 - 01:51:44 EST

Hi,

you shouldn't generate a certificate with a lifetime of more 45 years since openssl currently codes dates in the ASN.1 UTCTIME format (YY) instead of the Y2K proof GENERALIZEDTIME format (YYYY).

thus the years 1950-1999 are mapped to 50..99 and the years 2000-2049 are mapped to 00..49

Starting with the year 2050 the GENERALIZEDTIME format is used. But besides the Deutsche Telekom nobody is supporting this format in X.509 certificates right now.

Regards

Andreas

sahil wrote:

Do you need help?

> hello,

Andreas Steffen                   e-mail: andreas.steffen@strongsec.com
strongSec GmbH                    home:   
http://www.strongsec.com
Alter Zürichweg 20                phone:  +41 1 730 80 64

CH-8952 Schlieren (Switzerland) fax: +41 1 730 80 65

==========================================[strong internet security]===
_______________________________________________

FreeS/WAN Users mailing list
users@lists.freeswan.org
https://mj2.freeswan.org/cgi-bin/mj_wwwusr Received on Wed Mar 31 01:57:55 2004

This message: [ Message body ]
Next message: Andreas Steffen: "[Users] ANNOUNCE: strongswan-2.0.2 released"
Previous message: Amit Saxena: "Re: [Users] Regarding Unresolved symbols"
In reply to sahil: "[Users] freeswan-certificate problem"
Next in thread: sahil: "Re: [Users] freeswan-certificate problem"
Reply: sahil: "Re: [Users] freeswan-certificate problem"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 13:02:29 EDT