Hi All, Just wondering if anyone knew what the expiration date format was back from eap-tls transactions? I have a cert here that expires 23/07/2015 and FR gives back "150723132302Z". That's a Z on the end..? It's certainly not seconds since epoch or Jan 01 - 1601 which is seen in certain other operating systems. As part of fault finding I wanted to report back if the certificate has expired as I can't work out how to get the eap-tls failure message to a linelog. If I do an explicit check in post-auth-reject at least I can determine whether it's failed because the certificate that's expired. It would also be nice to have a list of people authenticating and report how many days left until the certificate they have expires, so we can take steps in the auto enrolment doesn't work. Thanks Andy
Am Donnerstag, 25. Juli 2013, 09:32:46 schrieb Franks Andy IT Systems Engineer:
Hi All, Just wondering if anyone knew what the expiration date format was back from eap-tls transactions? I have a cert here that expires 23/07/2015 and FR gives back "150723132302Z". That's a Z on the end..?
Zulu time. Equals GMT.
It's certainly not seconds since epoch or Jan 01 - 1601 which is seen in certain other operating systems.
YYMMDDhhmmss"Z" -- Mit freundlichen Grüßen, Michael Schwartzkopff -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64, +49 (162) 165 0044 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein
Just wondering if anyone knew what the expiration date format was back from eap-tls transactions? I have a cert here that expires 23/07/2015 and FR gives back "150723132302Z". That's a Z on the end..?
<http://en.wikipedia.org/wiki/ISO_8601>. -- George D M Ross MSc PhD CEng MBCS CITP, University of Edinburgh, School of Informatics, 10 Crichton Street, Edinburgh, Scotland, EH8 9AB Mail: gdmr@inf.ed.ac.uk Voice: 0131 650 5147 Fax: 0131 650 6899 PGP: 1024D/AD758CC5 B91E D430 1E0D 5883 EF6A 426C B676 5C2B AD75 8CC5 The University of Edinburgh is a charitable body, registered in Scotland, with registration number SC005336.
On 07/25/2013 04:50 AM, George Ross wrote:
Just wondering if anyone knew what the expiration date format was back from eap-tls transactions? I have a cert here that expires 23/07/2015 and FR gives back "150723132302Z". That's a Z on the end..?
Sorry, but "150723132302Z" is not 8601. https://en.wikipedia.org/wiki/ISO_8601 "150723132302Z" is universaTime a subset of ASN.1 GeneralizedTime http://www.obj-sys.com/asn1tutorial/node14.html http://luca.ntop.org/Teaching/Appunti/asn1.html (see section 5.17) universalTime is being used because certs are encoded in ASN.1, specifically they require the use of GeneralizedTime. The GeneralizedTime form was standardized before RFC 8601. The use of GeneralizedTime is an artifact of the certificate binary encoding format. I'm not sure that's the best presentation these days. I'd rather see GeneralizedTime values presented in 8601 format to be consistent with modern standards. To properly parse the universalTime format being used one has to understand the nuances of X509 certificate encoding which is expecting too much. I wonder if the OpenSSL library has an option or function to convert to 8601. -- John
participants (4)
-
Franks Andy (RLZ) IT Systems Engineer -
George Ross -
John Dennis -
Michael Schwartzkopff