AW: OpenVPNGui 2.4.7 fails: format error in certificate's notAfter field
WKnauf at hg-online.de
Wed Mar 6 11:16:04 UTC 2019
Many thanks to all of you for your help! Sorry for posting those basic questions, but I was helpless - I am just a VPN client user, with not much knowledge of SSL :-(.
I forwarded the problem to our customer. Hopefully, they have more knowledge than me about certificates ;-).
Von: openssl-users <openssl-users-bounces at openssl.org> Im Auftrag von Richard Levitte
Gesendet: Mittwoch, 6. März 2019 11:07
An: openssl-users at openssl.org
Betreff: Re: OpenVPNGui 2.4.7 fails: format error in certificate's notAfter field
On Wed, 06 Mar 2019 10:52:44 +0100,
Jan Just Keijser wrote:
> as a follow-up: Richard's analysis/suspicion was spot on.
> However, it was the *server* side certificate that was causing the
> error, and the server certificate does indeed contain a poorly
> formatted date:
> $ openssl asn1parse -in server.crt | grep UTC
> 157:d=3 hl=2 l= 13 prim: UTCTIME :091022132829Z
> 172:d=3 hl=2 l= 17 prim: UTCTIME :370308132808+0000
I'm glad I could help find the answer.
> OpenSSL 1.0.x groks this, 1.1+ does not.
Yup, 1.1+ is stricter regarding these things.
Richard Levitte levitte at openssl.org
OpenSSL Project http://www.openssl.org/~levitte/
More information about the openssl-users