Suyu/mbedtls
1
0
Fork 0
mirror of https://git.suyu.dev/suyu/mbedtls.git synced 2025-12-21 21:36:21 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Reject certificates with times not in UTC

Browse source
This commit is contained in:
Manuel Pégourié-Gonnard 2014-04-11 12:29:49 +02:00 • committed by Paul Bakker
parent 0776a43788
commit 9655e4597a
2 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
library/x509.c
View file

@ -274,7 +274,7 @@ int x509_get_time( unsigned char **p, const unsigned char *end,
memcpy( date, *p, ( len < sizeof( date ) - 1 ) ?
len : sizeof( date ) - 1 );
if( sscanf( date, "%2d%2d%2d%2d%2d%2d",
if( sscanf( date, "%2d%2d%2d%2d%2d%2dZ",
&time->year, &time->mon, &time->day,
&time->hour, &time->min, &time->sec ) < 5 )
return( POLARSSL_ERR_X509_INVALID_DATE );
@ -298,7 +298,7 @@ int x509_get_time( unsigned char **p, const unsigned char *end,
memcpy( date, *p, ( len < sizeof( date ) - 1 ) ?
len : sizeof( date ) - 1 );
if( sscanf( date, "%4d%2d%2d%2d%2d%2d",
if( sscanf( date, "%4d%2d%2d%2d%2d%2dZ",
&time->year, &time->mon, &time->day,
&time->hour, &time->min, &time->sec ) < 5 )
return( POLARSSL_ERR_X509_INVALID_DATE );