commit f48de9579f562bd28fefb60925321eda9bc58530
author Paul Bakker <p.j.bakker@polarssl.org> Tue Jul 08 14:39:41 2014 +0200
committer Paul Bakker <p.j.bakker@polarssl.org> Tue Jul 08 14:39:41 2014 +0200
tree 31867c21d0369236c49828429a8682ec6282552c
parent dedce0c35cf56353050c5406fc6a7fcd37554006

Use UTC to heck certificate validity

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index bb08fcd..8c064ad 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -10,6 +10,7 @@
    * Work around a bug of the version of Clang shipped by Apple with Mavericks
      that prevented bignum.c from compiling. (Reported by Rafael Baptista.)
    * Improvements to tests/Makefile, contributed by Oden Eriksson.
+   * Use UTC time to check certificate validity.
 
 Security
    * Forbid change of server certificate during renegotiation to prevent

library/x509parse.c

diff --git a/library/x509parse.c b/library/x509parse.c
index 085a3cf..f3e7831 100644
--- a/library/x509parse.c
+++ b/library/x509parse.c
@@ -3083,7 +3083,7 @@
 #if defined(_WIN32)
     SYSTEMTIME st;
 
-    GetLocalTime(&st);
+    GetSystemTime(&st);
 
     now->year = st.wYear;
     now->mon = st.wMonth;
@@ -3096,7 +3096,7 @@
     time_t tt;
 
     tt = time( NULL );
-    localtime_r( &tt, &lt );
+    gmtime_r( &tt, &lt );
 
     now->year = lt.tm_year + 1900;
     now->mon = lt.tm_mon + 1;