When trying to make a certificate for 30 years seems you run into the
2038 date limitation. Seems the code converts date to a signed int in
seconds since 1970 and now that we are within 30 years of the 2038 limit
we get hit by it. Using a date of (30 * 365) from now:

notBefore=Mar25 19:33:38 2008 GMT
notAfter=Feb 10 13:05:22 1902 GMT

Clearly it wrapped around and subtracted 68 years from 1970 instead of
adding 68 years.

Is there a plan to remove this limitation ?

I am seeing this on openssl-0.9.7m.

Thanks
    Chris Kottaridis    ([EMAIL PROTECTED])

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to