Skip to content

cryptographic-message-syntax: rfc3161 decoder using rfc2459 GeneralizedTime causing Malformed Err for valid TimeStampToken #482

@ngicks

Description

@ngicks

The implementation of x509-certificate/src/asn1time.rs seems correct.
but using it in RFC3161 TimeStampToken decoder is incorrect, causing Malfrom error for valid TstInfo.

Under the restrictions of RFC 2459 Section 4.1.2.5.2,
granularity of GeneralizedTime MUST be limited to one second.
But in RFC 3161,
GeneralizedTime can have fraction-of-time (The syntax is: YYYYMMDDhhmmss[.s...]Z) (RFC says the precision SHOULD be limited to one second, though)

my temporal fix is allowing fraction-of-time in x509-certificate/src/asn1time.rs
ngicks@ed45a91
but this does not look neat.

any ideas?

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions