/src/openssl/crypto/asn1/a_time.c
Line | Count | Source (jump to first uncovered line) |
1 | | /* |
2 | | * Copyright 1999-2024 The OpenSSL Project Authors. All Rights Reserved. |
3 | | * |
4 | | * Licensed under the Apache License 2.0 (the "License"). You may not use |
5 | | * this file except in compliance with the License. You can obtain a copy |
6 | | * in the file LICENSE in the source distribution or at |
7 | | * https://www.openssl.org/source/license.html |
8 | | */ |
9 | | |
10 | | /*- |
11 | | * This is an implementation of the ASN1 Time structure which is: |
12 | | * Time ::= CHOICE { |
13 | | * utcTime UTCTime, |
14 | | * generalTime GeneralizedTime } |
15 | | */ |
16 | | |
17 | | #include <stdio.h> |
18 | | #include <time.h> |
19 | | #include "crypto/asn1.h" |
20 | | #include "crypto/ctype.h" |
21 | | #include "internal/cryptlib.h" |
22 | | #include <openssl/asn1t.h> |
23 | | #include "asn1_local.h" |
24 | | |
25 | | IMPLEMENT_ASN1_MSTRING(ASN1_TIME, B_ASN1_TIME) |
26 | | |
27 | | IMPLEMENT_ASN1_FUNCTIONS(ASN1_TIME) |
28 | | IMPLEMENT_ASN1_DUP_FUNCTION(ASN1_TIME) |
29 | | |
30 | | static int is_utc(const int year) |
31 | 0 | { |
32 | 0 | if (50 <= year && year <= 149) |
33 | 0 | return 1; |
34 | 0 | return 0; |
35 | 0 | } |
36 | | |
37 | | static int leap_year(const int year) |
38 | 0 | { |
39 | 0 | if (year % 400 == 0 || (year % 100 != 0 && year % 4 == 0)) |
40 | 0 | return 1; |
41 | 0 | return 0; |
42 | 0 | } |
43 | | |
44 | | /* |
45 | | * Compute the day of the week and the day of the year from the year, month |
46 | | * and day. The day of the year is straightforward, the day of the week uses |
47 | | * a form of Zeller's congruence. For this months start with March and are |
48 | | * numbered 4 through 15. |
49 | | */ |
50 | | static void determine_days(struct tm *tm) |
51 | 0 | { |
52 | 0 | static const int ydays[12] = { |
53 | 0 | 0, 31, 59, 90, 120, 151, 181, 212, 243, 273, 304, 334 |
54 | 0 | }; |
55 | 0 | int y = tm->tm_year + 1900; |
56 | 0 | int m = tm->tm_mon; |
57 | 0 | int d = tm->tm_mday; |
58 | 0 | int c; |
59 | |
|
60 | 0 | tm->tm_yday = ydays[m] + d - 1; |
61 | 0 | if (m >= 2) { |
62 | | /* March and onwards can be one day further into the year */ |
63 | 0 | tm->tm_yday += leap_year(y); |
64 | 0 | m += 2; |
65 | 0 | } else { |
66 | | /* Treat January and February as part of the previous year */ |
67 | 0 | m += 14; |
68 | 0 | y--; |
69 | 0 | } |
70 | 0 | c = y / 100; |
71 | 0 | y %= 100; |
72 | | /* Zeller's congruence */ |
73 | 0 | tm->tm_wday = (d + (13 * m) / 5 + y + y / 4 + c / 4 + 5 * c + 6) % 7; |
74 | 0 | } |
75 | | |
76 | | int ossl_asn1_time_to_tm(struct tm *tm, const ASN1_TIME *d) |
77 | 0 | { |
78 | 0 | static const int min[9] = { 0, 0, 1, 1, 0, 0, 0, 0, 0 }; |
79 | 0 | static const int max[9] = { 99, 99, 12, 31, 23, 59, 59, 12, 59 }; |
80 | 0 | static const int mdays[12] = { 31, 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31 }; |
81 | 0 | char *a; |
82 | 0 | int n, i, i2, l, o, min_l, strict = 0, end = 6, btz = 5, md; |
83 | 0 | struct tm tmp; |
84 | | #if defined(CHARSET_EBCDIC) |
85 | | const char upper_z = 0x5A, num_zero = 0x30, period = 0x2E, minus = 0x2D, plus = 0x2B; |
86 | | #else |
87 | 0 | const char upper_z = 'Z', num_zero = '0', period = '.', minus = '-', plus = '+'; |
88 | 0 | #endif |
89 | | /* |
90 | | * ASN1_STRING_FLAG_X509_TIME is used to enforce RFC 5280 |
91 | | * time string format, in which: |
92 | | * |
93 | | * 1. "seconds" is a 'MUST' |
94 | | * 2. "Zulu" timezone is a 'MUST' |
95 | | * 3. "+|-" is not allowed to indicate a timezone |
96 | | */ |
97 | 0 | if (d->type == V_ASN1_UTCTIME) { |
98 | 0 | min_l = 13; |
99 | 0 | if (d->flags & ASN1_STRING_FLAG_X509_TIME) { |
100 | 0 | strict = 1; |
101 | 0 | } |
102 | 0 | } else if (d->type == V_ASN1_GENERALIZEDTIME) { |
103 | 0 | end = 7; |
104 | 0 | btz = 6; |
105 | 0 | min_l = 15; |
106 | 0 | if (d->flags & ASN1_STRING_FLAG_X509_TIME) { |
107 | 0 | strict = 1; |
108 | 0 | } |
109 | 0 | } else { |
110 | 0 | return 0; |
111 | 0 | } |
112 | | |
113 | 0 | l = d->length; |
114 | 0 | a = (char *)d->data; |
115 | 0 | o = 0; |
116 | 0 | memset(&tmp, 0, sizeof(tmp)); |
117 | | |
118 | | /* |
119 | | * GENERALIZEDTIME is similar to UTCTIME except the year is represented |
120 | | * as YYYY. This stuff treats everything as a two digit field so make |
121 | | * first two fields 00 to 99 |
122 | | */ |
123 | |
|
124 | 0 | if (l < min_l) |
125 | 0 | goto err; |
126 | 0 | for (i = 0; i < end; i++) { |
127 | 0 | if (!strict && (i == btz) && ((a[o] == upper_z) || (a[o] == plus) || (a[o] == minus))) { |
128 | 0 | i++; |
129 | 0 | break; |
130 | 0 | } |
131 | 0 | if (!ossl_ascii_isdigit(a[o])) |
132 | 0 | goto err; |
133 | 0 | n = a[o] - num_zero; |
134 | | /* incomplete 2-digital number */ |
135 | 0 | if (++o == l) |
136 | 0 | goto err; |
137 | | |
138 | 0 | if (!ossl_ascii_isdigit(a[o])) |
139 | 0 | goto err; |
140 | 0 | n = (n * 10) + a[o] - num_zero; |
141 | | /* no more bytes to read, but we haven't seen time-zone yet */ |
142 | 0 | if (++o == l) |
143 | 0 | goto err; |
144 | | |
145 | 0 | i2 = (d->type == V_ASN1_UTCTIME) ? i + 1 : i; |
146 | |
|
147 | 0 | if ((n < min[i2]) || (n > max[i2])) |
148 | 0 | goto err; |
149 | 0 | switch (i2) { |
150 | 0 | case 0: |
151 | | /* UTC will never be here */ |
152 | 0 | tmp.tm_year = n * 100 - 1900; |
153 | 0 | break; |
154 | 0 | case 1: |
155 | 0 | if (d->type == V_ASN1_UTCTIME) |
156 | 0 | tmp.tm_year = n < 50 ? n + 100 : n; |
157 | 0 | else |
158 | 0 | tmp.tm_year += n; |
159 | 0 | break; |
160 | 0 | case 2: |
161 | 0 | tmp.tm_mon = n - 1; |
162 | 0 | break; |
163 | 0 | case 3: |
164 | | /* check if tm_mday is valid in tm_mon */ |
165 | 0 | if (tmp.tm_mon == 1) { |
166 | | /* it's February */ |
167 | 0 | md = mdays[1] + leap_year(tmp.tm_year + 1900); |
168 | 0 | } else { |
169 | 0 | md = mdays[tmp.tm_mon]; |
170 | 0 | } |
171 | 0 | if (n > md) |
172 | 0 | goto err; |
173 | 0 | tmp.tm_mday = n; |
174 | 0 | determine_days(&tmp); |
175 | 0 | break; |
176 | 0 | case 4: |
177 | 0 | tmp.tm_hour = n; |
178 | 0 | break; |
179 | 0 | case 5: |
180 | 0 | tmp.tm_min = n; |
181 | 0 | break; |
182 | 0 | case 6: |
183 | 0 | tmp.tm_sec = n; |
184 | 0 | break; |
185 | 0 | } |
186 | 0 | } |
187 | | |
188 | | /* |
189 | | * Optional fractional seconds: decimal point followed by one or more |
190 | | * digits. |
191 | | */ |
192 | 0 | if (d->type == V_ASN1_GENERALIZEDTIME && a[o] == period) { |
193 | 0 | if (strict) |
194 | | /* RFC 5280 forbids fractional seconds */ |
195 | 0 | goto err; |
196 | 0 | if (++o == l) |
197 | 0 | goto err; |
198 | 0 | i = o; |
199 | 0 | while ((o < l) && ossl_ascii_isdigit(a[o])) |
200 | 0 | o++; |
201 | | /* Must have at least one digit after decimal point */ |
202 | 0 | if (i == o) |
203 | 0 | goto err; |
204 | | /* no more bytes to read, but we haven't seen time-zone yet */ |
205 | 0 | if (o == l) |
206 | 0 | goto err; |
207 | 0 | } |
208 | | |
209 | | /* |
210 | | * 'o' will never point to '\0' at this point, the only chance |
211 | | * 'o' can point to '\0' is either the subsequent if or the first |
212 | | * else if is true. |
213 | | */ |
214 | 0 | if (a[o] == upper_z) { |
215 | 0 | o++; |
216 | 0 | } else if (!strict && ((a[o] == plus) || (a[o] == minus))) { |
217 | 0 | int offsign = a[o] == minus ? 1 : -1; |
218 | 0 | int offset = 0; |
219 | |
|
220 | 0 | o++; |
221 | | /* |
222 | | * if not equal, no need to do subsequent checks |
223 | | * since the following for-loop will add 'o' by 4 |
224 | | * and the final return statement will check if 'l' |
225 | | * and 'o' are equal. |
226 | | */ |
227 | 0 | if (o + 4 != l) |
228 | 0 | goto err; |
229 | 0 | for (i = end; i < end + 2; i++) { |
230 | 0 | if (!ossl_ascii_isdigit(a[o])) |
231 | 0 | goto err; |
232 | 0 | n = a[o] - num_zero; |
233 | 0 | o++; |
234 | 0 | if (!ossl_ascii_isdigit(a[o])) |
235 | 0 | goto err; |
236 | 0 | n = (n * 10) + a[o] - num_zero; |
237 | 0 | i2 = (d->type == V_ASN1_UTCTIME) ? i + 1 : i; |
238 | 0 | if ((n < min[i2]) || (n > max[i2])) |
239 | 0 | goto err; |
240 | | /* if tm is NULL, no need to adjust */ |
241 | 0 | if (tm != NULL) { |
242 | 0 | if (i == end) |
243 | 0 | offset = n * 3600; |
244 | 0 | else if (i == end + 1) |
245 | 0 | offset += n * 60; |
246 | 0 | } |
247 | 0 | o++; |
248 | 0 | } |
249 | 0 | if (offset && !OPENSSL_gmtime_adj(&tmp, 0, offset * offsign)) |
250 | 0 | goto err; |
251 | 0 | } else { |
252 | | /* not Z, or not +/- in non-strict mode */ |
253 | 0 | goto err; |
254 | 0 | } |
255 | 0 | if (o == l) { |
256 | | /* success, check if tm should be filled */ |
257 | 0 | if (tm != NULL) |
258 | 0 | *tm = tmp; |
259 | 0 | return 1; |
260 | 0 | } |
261 | 0 | err: |
262 | 0 | return 0; |
263 | 0 | } |
264 | | |
265 | | ASN1_TIME *ossl_asn1_time_from_tm(ASN1_TIME *s, struct tm *ts, int type) |
266 | 0 | { |
267 | 0 | char* p; |
268 | 0 | ASN1_TIME *tmps = NULL; |
269 | 0 | const size_t len = 20; |
270 | |
|
271 | 0 | if (type == V_ASN1_UNDEF) { |
272 | 0 | if (is_utc(ts->tm_year)) |
273 | 0 | type = V_ASN1_UTCTIME; |
274 | 0 | else |
275 | 0 | type = V_ASN1_GENERALIZEDTIME; |
276 | 0 | } else if (type == V_ASN1_UTCTIME) { |
277 | 0 | if (!is_utc(ts->tm_year)) |
278 | 0 | goto err; |
279 | 0 | } else if (type != V_ASN1_GENERALIZEDTIME) { |
280 | 0 | goto err; |
281 | 0 | } |
282 | | |
283 | 0 | if (s == NULL) |
284 | 0 | tmps = ASN1_STRING_new(); |
285 | 0 | else |
286 | 0 | tmps = s; |
287 | 0 | if (tmps == NULL) |
288 | 0 | return NULL; |
289 | | |
290 | 0 | if (!ASN1_STRING_set(tmps, NULL, len)) |
291 | 0 | goto err; |
292 | | |
293 | 0 | tmps->type = type; |
294 | 0 | p = (char*)tmps->data; |
295 | |
|
296 | 0 | if (ts->tm_mon > INT_MAX - 1) |
297 | 0 | goto err; |
298 | | |
299 | 0 | if (type == V_ASN1_GENERALIZEDTIME) { |
300 | 0 | if (ts->tm_year > INT_MAX - 1900) |
301 | 0 | goto err; |
302 | 0 | tmps->length = BIO_snprintf(p, len, "%04d%02d%02d%02d%02d%02dZ", |
303 | 0 | ts->tm_year + 1900, ts->tm_mon + 1, |
304 | 0 | ts->tm_mday, ts->tm_hour, ts->tm_min, |
305 | 0 | ts->tm_sec); |
306 | 0 | } else { |
307 | 0 | tmps->length = BIO_snprintf(p, len, "%02d%02d%02d%02d%02d%02dZ", |
308 | 0 | ts->tm_year % 100, ts->tm_mon + 1, |
309 | 0 | ts->tm_mday, ts->tm_hour, ts->tm_min, |
310 | 0 | ts->tm_sec); |
311 | 0 | } |
312 | | |
313 | | #ifdef CHARSET_EBCDIC |
314 | | ebcdic2ascii(tmps->data, tmps->data, tmps->length); |
315 | | #endif |
316 | 0 | return tmps; |
317 | 0 | err: |
318 | 0 | if (tmps != s) |
319 | 0 | ASN1_STRING_free(tmps); |
320 | 0 | return NULL; |
321 | 0 | } |
322 | | |
323 | | ASN1_TIME *ASN1_TIME_set(ASN1_TIME *s, time_t t) |
324 | 0 | { |
325 | 0 | return ASN1_TIME_adj(s, t, 0, 0); |
326 | 0 | } |
327 | | |
328 | | ASN1_TIME *ASN1_TIME_adj(ASN1_TIME *s, time_t t, |
329 | | int offset_day, long offset_sec) |
330 | 0 | { |
331 | 0 | struct tm *ts; |
332 | 0 | struct tm data; |
333 | |
|
334 | 0 | ts = OPENSSL_gmtime(&t, &data); |
335 | 0 | if (ts == NULL) { |
336 | 0 | ERR_raise(ERR_LIB_ASN1, ASN1_R_ERROR_GETTING_TIME); |
337 | 0 | return NULL; |
338 | 0 | } |
339 | 0 | if (offset_day || offset_sec) { |
340 | 0 | if (!OPENSSL_gmtime_adj(ts, offset_day, offset_sec)) |
341 | 0 | return NULL; |
342 | 0 | } |
343 | 0 | return ossl_asn1_time_from_tm(s, ts, V_ASN1_UNDEF); |
344 | 0 | } |
345 | | |
346 | | int ASN1_TIME_check(const ASN1_TIME *t) |
347 | 0 | { |
348 | 0 | if (t->type == V_ASN1_GENERALIZEDTIME) |
349 | 0 | return ASN1_GENERALIZEDTIME_check(t); |
350 | 0 | else if (t->type == V_ASN1_UTCTIME) |
351 | 0 | return ASN1_UTCTIME_check(t); |
352 | 0 | return 0; |
353 | 0 | } |
354 | | |
355 | | /* Convert an ASN1_TIME structure to GeneralizedTime */ |
356 | | ASN1_GENERALIZEDTIME *ASN1_TIME_to_generalizedtime(const ASN1_TIME *t, |
357 | | ASN1_GENERALIZEDTIME **out) |
358 | 0 | { |
359 | 0 | ASN1_GENERALIZEDTIME *ret = NULL; |
360 | 0 | struct tm tm; |
361 | |
|
362 | 0 | if (!ASN1_TIME_to_tm(t, &tm)) |
363 | 0 | return NULL; |
364 | | |
365 | 0 | if (out != NULL) |
366 | 0 | ret = *out; |
367 | |
|
368 | 0 | ret = ossl_asn1_time_from_tm(ret, &tm, V_ASN1_GENERALIZEDTIME); |
369 | |
|
370 | 0 | if (out != NULL && ret != NULL) |
371 | 0 | *out = ret; |
372 | |
|
373 | 0 | return ret; |
374 | 0 | } |
375 | | |
376 | | int ASN1_TIME_set_string(ASN1_TIME *s, const char *str) |
377 | 0 | { |
378 | | /* Try UTC, if that fails, try GENERALIZED */ |
379 | 0 | if (ASN1_UTCTIME_set_string(s, str)) |
380 | 0 | return 1; |
381 | 0 | return ASN1_GENERALIZEDTIME_set_string(s, str); |
382 | 0 | } |
383 | | |
384 | | int ASN1_TIME_set_string_X509(ASN1_TIME *s, const char *str) |
385 | 0 | { |
386 | 0 | ASN1_TIME t; |
387 | 0 | struct tm tm; |
388 | 0 | int rv = 0; |
389 | |
|
390 | 0 | t.length = strlen(str); |
391 | 0 | t.data = (unsigned char *)str; |
392 | 0 | t.flags = ASN1_STRING_FLAG_X509_TIME; |
393 | |
|
394 | 0 | t.type = V_ASN1_UTCTIME; |
395 | |
|
396 | 0 | if (!ASN1_TIME_check(&t)) { |
397 | 0 | t.type = V_ASN1_GENERALIZEDTIME; |
398 | 0 | if (!ASN1_TIME_check(&t)) |
399 | 0 | goto out; |
400 | 0 | } |
401 | | |
402 | | /* |
403 | | * Per RFC 5280 (section 4.1.2.5.), the valid input time |
404 | | * strings should be encoded with the following rules: |
405 | | * |
406 | | * 1. UTC: YYMMDDHHMMSSZ, if YY < 50 (20YY) --> UTC: YYMMDDHHMMSSZ |
407 | | * 2. UTC: YYMMDDHHMMSSZ, if YY >= 50 (19YY) --> UTC: YYMMDDHHMMSSZ |
408 | | * 3. G'd: YYYYMMDDHHMMSSZ, if YYYY >= 2050 --> G'd: YYYYMMDDHHMMSSZ |
409 | | * 4. G'd: YYYYMMDDHHMMSSZ, if YYYY < 2050 --> UTC: YYMMDDHHMMSSZ |
410 | | * |
411 | | * Only strings of the 4th rule should be reformatted, but since a |
412 | | * UTC can only present [1950, 2050), so if the given time string |
413 | | * is less than 1950 (e.g. 19230419000000Z), we do nothing... |
414 | | */ |
415 | | |
416 | 0 | if (s != NULL && t.type == V_ASN1_GENERALIZEDTIME) { |
417 | 0 | if (!ossl_asn1_time_to_tm(&tm, &t)) |
418 | 0 | goto out; |
419 | 0 | if (is_utc(tm.tm_year)) { |
420 | 0 | t.length -= 2; |
421 | | /* |
422 | | * it's OK to let original t.data go since that's assigned |
423 | | * to a piece of memory allocated outside of this function. |
424 | | * new t.data would be freed after ASN1_STRING_copy is done. |
425 | | */ |
426 | 0 | t.data = OPENSSL_zalloc(t.length + 1); |
427 | 0 | if (t.data == NULL) |
428 | 0 | goto out; |
429 | 0 | memcpy(t.data, str + 2, t.length); |
430 | 0 | t.type = V_ASN1_UTCTIME; |
431 | 0 | } |
432 | 0 | } |
433 | | |
434 | 0 | if (s == NULL || ASN1_STRING_copy((ASN1_STRING *)s, (ASN1_STRING *)&t)) |
435 | 0 | rv = 1; |
436 | |
|
437 | 0 | if (t.data != (unsigned char *)str) |
438 | 0 | OPENSSL_free(t.data); |
439 | 0 | out: |
440 | 0 | return rv; |
441 | 0 | } |
442 | | |
443 | | int ASN1_TIME_to_tm(const ASN1_TIME *s, struct tm *tm) |
444 | 0 | { |
445 | 0 | if (s == NULL) { |
446 | 0 | time_t now_t; |
447 | |
|
448 | 0 | time(&now_t); |
449 | 0 | memset(tm, 0, sizeof(*tm)); |
450 | 0 | if (OPENSSL_gmtime(&now_t, tm) != NULL) |
451 | 0 | return 1; |
452 | 0 | return 0; |
453 | 0 | } |
454 | | |
455 | 0 | return ossl_asn1_time_to_tm(tm, s); |
456 | 0 | } |
457 | | |
458 | | int ASN1_TIME_diff(int *pday, int *psec, |
459 | | const ASN1_TIME *from, const ASN1_TIME *to) |
460 | 0 | { |
461 | 0 | struct tm tm_from, tm_to; |
462 | |
|
463 | 0 | if (!ASN1_TIME_to_tm(from, &tm_from)) |
464 | 0 | return 0; |
465 | 0 | if (!ASN1_TIME_to_tm(to, &tm_to)) |
466 | 0 | return 0; |
467 | 0 | return OPENSSL_gmtime_diff(pday, psec, &tm_from, &tm_to); |
468 | 0 | } |
469 | | |
470 | | static const char _asn1_mon[12][4] = { |
471 | | "Jan", "Feb", "Mar", "Apr", "May", "Jun", |
472 | | "Jul", "Aug", "Sep", "Oct", "Nov", "Dec" |
473 | | }; |
474 | | |
475 | | /* prints the time with the default date format (RFC 822) */ |
476 | | int ASN1_TIME_print(BIO *bp, const ASN1_TIME *tm) |
477 | 0 | { |
478 | 0 | return ASN1_TIME_print_ex(bp, tm, ASN1_DTFLGS_RFC822); |
479 | 0 | } |
480 | | |
481 | | /* returns 1 on success, 0 on BIO write error or parse failure */ |
482 | | int ASN1_TIME_print_ex(BIO *bp, const ASN1_TIME *tm, unsigned long flags) |
483 | 0 | { |
484 | 0 | return ossl_asn1_time_print_ex(bp, tm, flags) > 0; |
485 | 0 | } |
486 | | |
487 | | |
488 | | /* prints the time with the date format of ISO 8601 */ |
489 | | /* returns 0 on BIO write error, else -1 in case of parse failure, else 1 */ |
490 | | int ossl_asn1_time_print_ex(BIO *bp, const ASN1_TIME *tm, unsigned long flags) |
491 | 0 | { |
492 | 0 | char *v; |
493 | 0 | int gmt = 0, l; |
494 | 0 | struct tm stm; |
495 | 0 | const char upper_z = 0x5A, period = 0x2E; |
496 | | |
497 | | /* ossl_asn1_time_to_tm will check the time type */ |
498 | 0 | if (!ossl_asn1_time_to_tm(&stm, tm)) |
499 | 0 | return BIO_write(bp, "Bad time value", 14) ? -1 : 0; |
500 | | |
501 | 0 | l = tm->length; |
502 | 0 | v = (char *)tm->data; |
503 | 0 | if (v[l - 1] == upper_z) |
504 | 0 | gmt = 1; |
505 | |
|
506 | 0 | if (tm->type == V_ASN1_GENERALIZEDTIME) { |
507 | 0 | char *f = NULL; |
508 | 0 | int f_len = 0; |
509 | | |
510 | | /* |
511 | | * Try to parse fractional seconds. '14' is the place of |
512 | | * 'fraction point' in a GeneralizedTime string. |
513 | | */ |
514 | 0 | if (tm->length > 15 && v[14] == period) { |
515 | 0 | f = &v[14]; |
516 | 0 | f_len = 1; |
517 | 0 | while (14 + f_len < l && ossl_ascii_isdigit(f[f_len])) |
518 | 0 | ++f_len; |
519 | 0 | } |
520 | |
|
521 | 0 | if ((flags & ASN1_DTFLGS_TYPE_MASK) == ASN1_DTFLGS_ISO8601) { |
522 | 0 | return BIO_printf(bp, "%4d-%02d-%02d %02d:%02d:%02d%.*s%s", |
523 | 0 | stm.tm_year + 1900, stm.tm_mon + 1, |
524 | 0 | stm.tm_mday, stm.tm_hour, |
525 | 0 | stm.tm_min, stm.tm_sec, f_len, f, |
526 | 0 | (gmt ? "Z" : "")) > 0; |
527 | 0 | } |
528 | 0 | else { |
529 | 0 | return BIO_printf(bp, "%s %2d %02d:%02d:%02d%.*s %d%s", |
530 | 0 | _asn1_mon[stm.tm_mon], stm.tm_mday, stm.tm_hour, |
531 | 0 | stm.tm_min, stm.tm_sec, f_len, f, stm.tm_year + 1900, |
532 | 0 | (gmt ? " GMT" : "")) > 0; |
533 | 0 | } |
534 | 0 | } else { |
535 | 0 | if ((flags & ASN1_DTFLGS_TYPE_MASK) == ASN1_DTFLGS_ISO8601) { |
536 | 0 | return BIO_printf(bp, "%4d-%02d-%02d %02d:%02d:%02d%s", |
537 | 0 | stm.tm_year + 1900, stm.tm_mon + 1, |
538 | 0 | stm.tm_mday, stm.tm_hour, |
539 | 0 | stm.tm_min, stm.tm_sec, |
540 | 0 | (gmt ? "Z" : "")) > 0; |
541 | 0 | } |
542 | 0 | else { |
543 | 0 | return BIO_printf(bp, "%s %2d %02d:%02d:%02d %d%s", |
544 | 0 | _asn1_mon[stm.tm_mon], stm.tm_mday, stm.tm_hour, |
545 | 0 | stm.tm_min, stm.tm_sec, stm.tm_year + 1900, |
546 | 0 | (gmt ? " GMT" : "")) > 0; |
547 | 0 | } |
548 | 0 | } |
549 | 0 | } |
550 | | |
551 | | int ASN1_TIME_cmp_time_t(const ASN1_TIME *s, time_t t) |
552 | 0 | { |
553 | 0 | struct tm stm, ttm; |
554 | 0 | int day, sec; |
555 | |
|
556 | 0 | if (!ASN1_TIME_to_tm(s, &stm)) |
557 | 0 | return -2; |
558 | | |
559 | 0 | if (!OPENSSL_gmtime(&t, &ttm)) |
560 | 0 | return -2; |
561 | | |
562 | 0 | if (!OPENSSL_gmtime_diff(&day, &sec, &ttm, &stm)) |
563 | 0 | return -2; |
564 | | |
565 | 0 | if (day > 0 || sec > 0) |
566 | 0 | return 1; |
567 | 0 | if (day < 0 || sec < 0) |
568 | 0 | return -1; |
569 | 0 | return 0; |
570 | 0 | } |
571 | | |
572 | | int ASN1_TIME_normalize(ASN1_TIME *t) |
573 | 0 | { |
574 | 0 | struct tm tm; |
575 | |
|
576 | 0 | if (t == NULL || !ASN1_TIME_to_tm(t, &tm)) |
577 | 0 | return 0; |
578 | | |
579 | 0 | return ossl_asn1_time_from_tm(t, &tm, V_ASN1_UNDEF) != NULL; |
580 | 0 | } |
581 | | |
582 | | int ASN1_TIME_compare(const ASN1_TIME *a, const ASN1_TIME *b) |
583 | 0 | { |
584 | 0 | int day, sec; |
585 | |
|
586 | 0 | if (!ASN1_TIME_diff(&day, &sec, b, a)) |
587 | 0 | return -2; |
588 | 0 | if (day > 0 || sec > 0) |
589 | 0 | return 1; |
590 | 0 | if (day < 0 || sec < 0) |
591 | 0 | return -1; |
592 | 0 | return 0; |
593 | 0 | } |