/* Store validity information. The time is in TIMEBUF. A value of 0
for WHAT stores the notBefore time, a value of 1 stores the
notAfter time. Only used for building an X.509 certificate. */
gpg_error_t
ksba_certreq_set_validity (ksba_certreq_t cr, int what,
const ksba_isotime_t timebuf)
{
if (!cr || what < 0 || what > 1
|| !timebuf || _ksba_assert_time_format (timebuf))
return gpg_error (GPG_ERR_INV_VALUE);
_ksba_copy_time (what?cr->x509.not_after:cr->x509.not_before, timebuf);
return 0;
}
gpg_error_t
_ksba_der_store_time (AsnNode node, const ksba_isotime_t atime)
{
char buf[50], *p;
int need_gen;
gpg_error_t err;
/* First check that ATIME is indeed as formatted as expected. */
err = _ksba_assert_time_format (atime);
if (err)
return err;
memcpy (buf, atime, 8);
memcpy (buf+8, atime+9, 6);
strcpy (buf+14, "Z");
/* We need to use generalized time beginning with the year 2050. */
need_gen = (_ksba_cmp_time (atime, "20500101T000000") >= 0);
if (node->type == TYPE_ANY)
node->type = need_gen? TYPE_GENERALIZED_TIME : TYPE_UTC_TIME;
else if (node->type == TYPE_CHOICE)
{ /* find a suitable choice to store the value */
AsnNode n;
for (n=node->down; n; n=n->right)
{
if ( (need_gen && n->type == TYPE_GENERALIZED_TIME)
|| (!need_gen && n->type == TYPE_UTC_TIME))
{
node = n;
break;
}
}
}
if (node->type == TYPE_GENERALIZED_TIME
|| node->type == TYPE_UTC_TIME)
{
p = node->type == TYPE_UTC_TIME? (buf+2):buf;
return store_value (node, p, strlen (p));
}
else
return gpg_error (GPG_ERR_INV_VALUE);
}
