apps/ca: Properly handle certificate expiration times in do_updatedb
authorArmin Fuerst <armin@fuerst.priv.at>
Fri, 29 Jan 2021 18:16:14 +0000 (19:16 +0100)
committerTomas Mraz <tomas@openssl.org>
Wed, 3 Feb 2021 10:29:07 +0000 (11:29 +0100)
commit963a65bfb41562909d1800339f7b1e3cfc0a39bf
tree773869f90aeba5f4bd86afdffa42695f42cc1901
parent1409b5f664f21a52d23d7b9d0e0f962e2bde2b9e
apps/ca: Properly handle certificate expiration times in do_updatedb

Fixes #13944

   + changed ASN1_UTCTIME to ASN1_TIME
   + removed all Y2K code from do_updatedb
   + changed compare to ASN1_TIME_compare

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/14026)

(cherry picked from commit dabea5447dc487983a50a40856f731db0db17a8e)
apps/ca.c