On 14/07/2015 21:50, Salz, Rich wrote: >> This is important when creating root certs with expiry dates after 2038 > Not an issue for openssl. As long as you use ASN1_TIME values, it's okay. Might be an issue if converting to time_t on 32-bit platforms. Victor suggested to use only ASN1_TIME_set() together with libc parsing functions. That would obviously not work outside the libc time_t range, hence my question if ASN1_TINE_set_string() avoids that limitation, despite Victor's suggestion to never use it. Enjoy Jakob -- Jakob Bohm, CIO, Partner, WiseMo A/S. http://www.wisemo.com Transformervej 29, 2860 S?borg, Denmark. Direct +45 31 13 16 10 This public discussion message is non-binding and may contain errors. WiseMo - Remote Service Management for PCs, Phones and Embedded -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20150715/0345bbf5/attachment.html>