]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
PKCS#7: Improve and export the X.509 ASN.1 time object decoder
authorDavid Howells <dhowells@redhat.com>
Wed, 29 Jul 2015 15:58:32 +0000 (16:58 +0100)
committerSasha Levin <sasha.levin@oracle.com>
Mon, 18 Apr 2016 12:50:43 +0000 (08:50 -0400)
commitf85d91f88486b34679c532a5687466eaf335258f
tree8b95941035c8ce376702b13c52337f618e420e4a
parent3ccbbbf7b5ceb75bef47692c39f443a3efb38437
PKCS#7: Improve and export the X.509 ASN.1 time object decoder

[ Upstream commit fd19a3d195be23e8d9d0d66576b96ea25eea8323 ]

Make the X.509 ASN.1 time object decoder fill in a time64_t rather than a
struct tm to make comparison easier (unfortunately, this makes readable
display less easy) and export it so that it can be used by the PKCS#7 code
too.

Further, tighten up its parsing to reject invalid dates (eg. weird
characters, non-existent hour numbers) and unsupported dates (eg. timezones
other than 'Z' or dates earlier than 1970).

Signed-off-by: David Howells <dhowells@redhat.com>
Reviewed-by: David Woodhouse <David.Woodhouse@intel.com>
Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
crypto/asymmetric_keys/x509_cert_parser.c
crypto/asymmetric_keys/x509_parser.h
crypto/asymmetric_keys/x509_public_key.c