aboutsummaryrefslogtreecommitdiff
path: root/rcynic
diff options
context:
space:
mode:
authorRob Austein <sra@hactrn.net>2013-11-06 00:32:43 +0000
committerRob Austein <sra@hactrn.net>2013-11-06 00:32:43 +0000
commitc5cd789e779dac8caf48566ecd5f300190db2d6f (patch)
treee2f36dae721a761a726651bf8cf7d70275a036af /rcynic
parent21c7552eeead5012d13e9a0b8b7384af7b8b0b80 (diff)
RFC 5280 restriction to 20 octets is 20 octets in two's complement, so
max value has to allow for sign bit. See #642. svn path=/trunk/; revision=5580
Diffstat (limited to 'rcynic')
-rw-r--r--rcynic/rcynic.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/rcynic/rcynic.c b/rcynic/rcynic.c
index a131e189..720821bd 100644
--- a/rcynic/rcynic.c
+++ b/rcynic/rcynic.c
@@ -5533,7 +5533,7 @@ int main(int argc, char *argv[])
if (!(asn1_zero = s2i_ASN1_INTEGER(NULL, "0x0")) ||
!(asn1_four_octets = s2i_ASN1_INTEGER(NULL, "0xFFFFFFFF")) ||
- !(asn1_twenty_octets = s2i_ASN1_INTEGER(NULL, "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF")) ||
+ !(asn1_twenty_octets = s2i_ASN1_INTEGER(NULL, "0x7FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF")) ||
!(NID_binary_signing_time = OBJ_create("1.2.840.113549.1.9.16.2.46",
"id-aa-binarySigningTime",
"id-aa-binarySigningTime"))) {