Make ASN1_TIME_set_string_X509 and ASN1_TIME_set_string match the man page
authorbeck <beck@openbsd.org>
Mon, 8 Apr 2024 19:57:40 +0000 (19:57 +0000)
committerbeck <beck@openbsd.org>
Mon, 8 Apr 2024 19:57:40 +0000 (19:57 +0000)
commit72c7c57a68e32c57ac752161b5a93464ad11e7e1
treef42654286777f70def50a97e75813a315f0c744c
parent7e284d508f03134ed914e01310f81a72255d0731
Make ASN1_TIME_set_string_X509 and ASN1_TIME_set_string match the man page

This makes it where people can't put dumb values in certs without
trying harder, and changes the regress to test this.

GENERALIZED times outside of the RFC5280 spec are required for OCSP
but these should be constructed with the GENERALIZED time string
setters.

ok tb@
lib/libcrypto/asn1/a_time_tm.c
regress/lib/libcrypto/asn1/asn1time.c
regress/lib/libcrypto/asn1/rfc5280time.c