mirror of
https://github.com/openssl/openssl.git
synced 2024-12-03 05:41:46 +08:00
8120223773
- Added options `-not_before` (start date) and `-not-after` (end date) for explicit setting of the validity period of a certificate in the apps `ca`, `req` and `x509` - The new options accept time strings or "today" - In app `ca`, use the new options as aliases of the already existing options `-startdate` and `-enddate` - When used in apps `req` and `x509`, the end date must be >= the start date, in app `ca` end date < start date is also accepted - In any case, `-not-after` overrides the `-days` option - Added helper function `check_cert_time_string` to validate given certificate time strings - Use the new helper function in apps `ca`, `req` and `x509` - Moved redundant code for time string checking into `set_cert_times` helper function. - Added tests for explicit start and end dates in apps `req` and `x509` - test: Added auxiliary functions for parsing fields from `-text` formatted output to `tconversion.pl` - CHANGES: Added to new section 3.4 Signed-off-by: Stephan Wurm <atomisirsi@gsklan.de> Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21716) |
||
|---|---|---|
| .. | ||
| demoSRP | ||
| include | ||
| lib | ||
| asn1parse.c | ||
| build.info | ||
| ca-cert.srl | ||
| ca-key.pem | ||
| ca-req.pem | ||
| ca.c | ||
| CA.pl.in | ||
| cert.pem | ||
| ciphers.c | ||
| client.pem | ||
| cmp.c | ||
| cms.c | ||
| crl2pkcs7.c | ||
| crl.c | ||
| ct_log_list.cnf | ||
| dgst.c | ||
| dhparam.c | ||
| dsa512.pem | ||
| dsa1024.pem | ||
| dsa-ca.pem | ||
| dsa-pca.pem | ||
| dsa.c | ||
| dsap.pem | ||
| dsaparam.c | ||
| ec.c | ||
| ecparam.c | ||
| enc.c | ||
| engine.c | ||
| errstr.c | ||
| fipsinstall.c | ||
| gendsa.c | ||
| genpkey.c | ||
| genrsa.c | ||
| info.c | ||
| insta.ca.crt | ||
| kdf.c | ||
| list.c | ||
| mac.c | ||
| nseq.c | ||
| ocsp.c | ||
| openssl-vms.cnf | ||
| openssl.c | ||
| openssl.cnf | ||
| passwd.c | ||
| pca-cert.srl | ||
| pca-key.pem | ||
| pca-req.pem | ||
| pkcs7.c | ||
| pkcs8.c | ||
| pkcs12.c | ||
| pkey.c | ||
| pkeyparam.c | ||
| pkeyutl.c | ||
| prime.c | ||
| privkey.pem | ||
| progs.pl | ||
| rand.c | ||
| rehash.c | ||
| req.c | ||
| req.pem | ||
| rsa8192.pem | ||
| rsa.c | ||
| rsautl.c | ||
| s512-key.pem | ||
| s512-req.pem | ||
| s1024key.pem | ||
| s1024req.pem | ||
| s_client.c | ||
| s_server.c | ||
| s_time.c | ||
| server2.pem | ||
| server.pem | ||
| server.srl | ||
| sess_id.c | ||
| smime.c | ||
| speed.c | ||
| spkac.c | ||
| srp.c | ||
| storeutl.c | ||
| testCA.pem | ||
| testdsa.h | ||
| testrsa.h | ||
| timeouts.h | ||
| ts.c | ||
| tsget.in | ||
| verify.c | ||
| version.c | ||
| vms_decc_init.c | ||
| x509.c | ||