> thanks a lot for answering my question.. but is this the only way? > it seems a bit overwhelming for me.. isn't there any other way? > like any function we can call?
Rather than risking you screwing up security-critical code, why don't you paste the part of the code that sets the validity and I'll post back the code modified as you need? Search for 'X509_set_notAfter', 'X509_gmtime_adj' and 'ASN1_UTCTIME' and with luck you should be able to find that chunk of code. DS ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]