]> git.ipfire.org Git - thirdparty/openssl.git/commit
Improved error message for X509_V_ERR_CERT_NOT_YET_VALID
authorLuke Kurlandski <44705759+lkurlandski@users.noreply.github.com>
Tue, 4 Mar 2025 16:53:36 +0000 (11:53 -0500)
committerTomas Mraz <tomas@openssl.org>
Thu, 24 Apr 2025 12:37:39 +0000 (14:37 +0200)
commit0efc439a3be54a6eb73015e997aa6a6f375b77ef
tree05ed64d4fe1bf38071128f1c97c0890d19430eb1
parentf492649b99012b0b8ab5c83b66b20aa65bee1f1c
Improved error message for X509_V_ERR_CERT_NOT_YET_VALID

In addition to an invalid certificate, it is not unlikely that this
exact error (case X509_V_ERR_CERT_NOT_YET_VALID) is caused by an
incorrect system clock. This cannot be trivially fixed, so for now,
we simply improve the quality of the error message.

Fixes #14771

CLA: trivial

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27141)
crypto/x509/x509_txt.c