Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Wolfssl accepts digital certificates with incorrect expiry date format #6384

Open
llmlla opened this issue May 5, 2023 · 2 comments
Open

Wolfssl accepts digital certificates with incorrect expiry date format #6384

llmlla opened this issue May 5, 2023 · 2 comments
Assignees
@kareem-wolfssl

Comments

@llmlla
Copy link

llmlla commented May 5, 2023

When I used wolfssl for digital certificate validation, I found that wolfssl accepted a digital certificate with the wrong expiry date format.
The version I used is wolfssl 4.2.0.
Here are certificates I used.
leaf.txt
root.txt
@kareem-wolfssl
Copy link
Contributor

Hi @llmlla ,

4.2.0 is extremely outdated and no longer supported, please upgrade to 5.6.0, our latest release, and retry.
Your root certs appear to have valid date formats, we do support both UTC and Generalized time. With their expiry dates set far into the future (9999/6566), I do expect them to validate. Your leaf cert appears to have an invalid notBefore date, and I expect it to fail.

Thanks,
Kareem

@llmlla
Copy link
Author

llmlla commented May 7, 2023

Thanks for the suggestion, I will try the latest version.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@kareem-wolfssl kareem-wolfssl

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@kareem-wolfssl @llmlla