From: Alan T. DeKok <aland@freeradius.org>
Date: Thu, 13 Jul 2017 15:49:29 +0000 (-0400)
Subject: a normal ASN1 time is 13 octets
X-Git-Tag: release_3_0_15~3
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=cd1d40e1501ff32f3ac683c688d120256f0e3d80;p=thirdparty%2Ffreeradius-server.git

a normal ASN1 time is 13 octets

YYMMDDHHMMSSZ
---

diff --git a/src/main/tls.c b/src/main/tls.c
index 6816ce66eb1..3d8b1b552f4 100644
--- a/src/main/tls.c
+++ b/src/main/tls.c
@@ -1454,7 +1454,7 @@ static int ocsp_asn1time_to_epoch(time_t *out, char const *asn1)
 
 	memset(&t, 0, sizeof(t));
 
-	if ((end - p) <= 12) {
+	if ((end - p) <= 13) {
 		if ((end - p) < 2) {
 			fr_strerror_printf("ASN1 date string too short, expected 2 additional bytes, got %zu bytes",
 					   end - p);