<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div class="">Correct, </div>
<div class=""><br class="">
</div>
But if one want’s strcmp()’s behavior (i.e. 0 is equality), ASN1_TIME_cmp_time_t() will work (and was written because X509_cmp_time() couldn’t be changed without breaking other things).<br class="">
<div class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div class="">--</div>
<div class="">-Todd Short</div>
<div class="">// <a href="mailto:tshort@akamai.com" class="">tshort@akamai.com</a></div>
<div class="">// "One if by land, two if by sea, three if by the Internet."</div>
</div>
</div>
</div>
<br class="">
<div>
<blockquote type="cite" class="">
<div class="">On Sep 11, 2017, at 10:43 AM, Daniel Kahn Gillmor <<a href="mailto:dkg@fifthhorseman.net" class="">dkg@fifthhorseman.net</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div class="">On Mon 2017-09-11 14:16:11 +0000, Short, Todd via openssl-dev wrote:<br class="">
<blockquote type="cite" class="">Yes, it’s annoying, but it’s historic. I looked into changing this at one point.<br class="">
</blockquote>
<br class="">
I think Dimitry's point was that the documentation doesn't match the<br class="">
implementation because of the flexibility of strcmp's defined return<br class="">
code.<br class="">
<br class="">
However, i think commit 80770da39ebba0101079477611b7ce2f426653c5 ("X509<br class="">
time: tighten validation per RFC 5280") resolves Dmitry's concerns.<br class="">
<br class="">
--dkg<br class="">
</div>
</div>
</blockquote>
</div>
<br class="">
</body>
</html>