date - startdate openssl set timezone -
good morning,
today have question concerning openssl. when sign certificat in openssl ca, realized needed wait amount of time before being able use certificat.
at first did not understant wrong had same hour on ca , on server (used openvpn). realized when sign certificat default timezone of certificate gmt while server using cet.
so thought going use startdate when generate certificate , problème solwed. when use start date '20140404000000z' , time zone still gmt while server in cet.
is possible tell him use timezone of server , not gmt. server centos.
any appricated.
thanks
according rfc 5280 defines x.509 certificate profile time fields in certificate must expressed in gmt time. see sections 4.1.2.5, 4.1.2.5.1 , 4.1.2.5.2.
anyway when server verifies validity of client certificate should transform gmt time acquired certificate own timezone or vice versa. maybe clock on system issuing certificates not in sync clock on vpn server? few seconds or minutes can make difference.
Comments
Post a Comment