mirror/openssl
2
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2025-02-17 14:32:04 +08:00
Code Issues Packages Projects Releases Wiki Activity

Default CT_POLICY_EVAL_CTX.epoch_time_in_ms to time()

Browse Source 
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/1554)
This commit is contained in:
Rob Percival 2016-09-12 16:57:38 +01:00 committed by Rich Salz
parent 1871a5aa8a
commit e25233d99c
2 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
crypto/ct/ct_policy.c
View File

@ -13,18 +13,25 @@
#include <openssl/ct.h>
#include <openssl/err.h>
#include <time.h>
#include "ct_locl.h"
CT_POLICY_EVAL_CTX *CT_POLICY_EVAL_CTX_new(void)
{
CT_POLICY_EVAL_CTX *ctx = OPENSSL_zalloc(sizeof(CT_POLICY_EVAL_CTX));
time_t epoch_time_in_s;
if (ctx == NULL) {
CTerr(CT_F_CT_POLICY_EVAL_CTX_NEW, ERR_R_MALLOC_FAILURE);
return NULL;
}
// Use the current time if available.
time(&epoch_time_in_s);
if (epoch_time_in_s != -1)
ctx->epoch_time_in_ms = epoch_time_in_s * 1000;
return ctx;
}

4
doc/man3/CT_POLICY_EVAL_CTX_new.pod
View File

@ -68,8 +68,8 @@ CT_POLICY_EVAL_CTX.
The SCT timestamp will be compared to this time to check whether the SCT was
issued in the future. RFC6962 states that "TLS clients MUST reject SCTs whose
timestamp is in the future". Typically, the time provided to this function will
be the current time.
timestamp is in the future". By default, this will be set to the
current time (obtained by calling time()) if possible.
The time should be in milliseconds since the Unix epoch.