Hi Ziyu, The system time is correct and I have checked the valid from and until range and it is correct for all cases too. The error code I get from the callback for the verifications error is 10 which (according to my version at least) corresponds to X509_V_ERR_CERT_HAS_EXPIRED, the error depth was 2 if that helps with any pointing in the right direction too.
Regards, Andy From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Ziyu Liu Sent: 11. oktober 2011 11:40 To: openssl-users@openssl.org Subject: Re:SSL_connect is indicating the www.google.com certificate is expired Hi, Andy, Check your system's time. Is the time in the range of Validity. If this is ok, I think this may not really be a expried error and you may check the source code to see what happened. At 2011-10-11 16:09:34,"Shaw Andy" <andy.s...@digia.com<mailto:andy.s...@digia.com>> wrote: Hi! When I use SSL_connect with the https://www.google.com address then it is claiming that the certificate is expired even though I have checked the certificate and the issuers and anything I can find related to it to see why it might think that but it all looks correct. This only happens on Windows XP and not with all certificates as the majority of them work fine without a problem. I have tried with the latest version - OpenSSL v1.0.0e and it still occurs there. Does anyone have any idea why this could be the case for me? Any suggestions will be gratefully received :) Regards, Andy PS: To give more of a context, I am working with Qt directly here (as a developer to some extent on Qt) and thus I have not written the code that is failing myself so if it is likely to be a problem with how the code is implemented I can try and reproduce it standalone.
