<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7638.1">
<TITLE>TLS-Client-Cert-Expiration date format</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">Hi All,</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">Just wondering if anyone knew what the expiration date format was</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">back</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">from</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">eap-tls</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri"> transactions? I have a cert here that expires 23/07/2015 and</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">FR</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri"> gives back</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri"></FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri"></FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">“</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri">150723132302Z</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri">”.</FONT></SPAN><SPAN LANG="en-gb"> </SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">That’s a Z on the end..?</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">It’s certainly not seconds since epoch</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri"> or</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">Jan 01 -</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">1601 which is seen in certain other operating systems.</FONT></SPAN><SPAN LANG="en-gb"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">As part of fault finding I wanted to report back if the certificate has expired as I can</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri">’t work out how to get the eap-tls failure message to a linelog. If I do an explicit check</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">in post-auth-reject</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">at least I can determine whether it’s</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">failed because</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">the certificate that’s expired</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri">. It would also be nice to have a list of people authenticating and report how many days left until the certificate they have expires, so we can take steps in the auto</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">enrolment</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri"></FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">doesn’t work.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">Thanks</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">Andy</FONT></SPAN><SPAN LANG="en-gb"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"></SPAN></P>
</BODY>
</HTML>