Re: [Users] freeswan-certificate problem

That's strange,

so does it mean that when i give value as days=12346, openssl first tries to calculate today's date by taking number of seconds since Epoch (Jan 1, 1970) and then add number of (days*24*60*60)seconds to that variable.
i.e. int n= (No. of seconds since Epoch (Jan 1, 1970)) + (days*24*60*60)seconds
where n is date of getting validity over.

Then this is flaw,i mean openssl can't be used to generate certificate above Jan 18 2038 date.

Am i right???
what is solution.

thanx
regards

-----Original Message-----
From: Andreas Steffen [mailto:andreas.steffen@strongsec.net] Sent: Wednesday, March 31, 2004 5:06 PM
To: sahil
Cc: freeswan user
Subject: Re: [Users] freeswan-certificate problem

Ok, the largest positive integer a 32 bit signed int variable can represent is

    2^31 -1 = 2'147'483'647

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek

On a Linux/Unix system dates are stored in elapsed seconds since Epoch (Jan 1, 1970).

2'147'483'647 seconds = 596'523 hours = 24'855 days

• 68 years + 17 days

Jan 1 1970 + 68 years + 17 days = Jan 18 2038

Thus the limitation in openssl is not due to ASN.1 UTCTIME coding but to 32 bit integer arithmetic.

Regards

Andreas

sahil wrote:

> hi,
>
> But when i gave days=12346,

Andreas Steffen                   e-mail: andreas.steffen@strongsec.com
strongSec GmbH                    home:   
http://www.strongsec.com
Alter Zürichweg 20                phone:  +41 1 730 80 64

==========================================[strong internet security]===

Do you need more help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek

Content Security by MailMarshal