Properly ASN.1 encode dates in certificates depending on the year.

src/libstrongswan/plugins/x509/x509_ac.c

@@ -527,8 +527,8 @@ static chunk_t build_v2_form(private_x509_ac_t *this)
 static chunk_t build_attr_cert_validity(private_x509_ac_t *this)
 {
 	return asn1_wrap(ASN1_SEQUENCE, "mm",
-				asn1_from_time(&this->notBefore, ASN1_GENERALIZEDTIME),
-				asn1_from_time(&this->notAfter,  ASN1_GENERALIZEDTIME));
+				asn1_from_time(&this->notBefore),
+				asn1_from_time(&this->notAfter));
 }
 
 

src/libstrongswan/plugins/x509/x509_cert.c

@@ -2316,8 +2316,8 @@ static bool generate(private_x509_cert_t *cert, certificate_t *sign_cert,
 		asn1_algorithmIdentifier(cert->algorithm),
 		issuer->get_encoding(issuer),
 		asn1_wrap(ASN1_SEQUENCE, "mm",
-			asn1_from_time(&cert->notBefore, ASN1_UTCTIME),
-			asn1_from_time(&cert->notAfter, ASN1_UTCTIME)),
+			asn1_from_time(&cert->notBefore),
+			asn1_from_time(&cert->notAfter)),
 		subject->get_encoding(subject),
 		key_info, extensions);
 

src/libstrongswan/plugins/x509/x509_crl.c

@@ -736,7 +736,7 @@ static bool generate(private_x509_crl_t *this, certificate_t *cert,
 		}
 		revoked = asn1_wrap(ASN1_SEQUENCE, "mmm",
 							asn1_integer("c", serial),
-							asn1_from_time(&date, ASN1_UTCTIME),
+							asn1_from_time(&date),
 							entry_ext);
 		certList = chunk_cat("mm", certList, revoked);
 	}
@@ -773,8 +773,8 @@ static bool generate(private_x509_crl_t *this, certificate_t *cert,
 							ASN1_INTEGER_1,
 							asn1_algorithmIdentifier(this->algorithm),
 							this->issuer->get_encoding(this->issuer),
-							asn1_from_time(&this->thisUpdate, ASN1_UTCTIME),
-							asn1_from_time(&this->nextUpdate, ASN1_UTCTIME),
+							asn1_from_time(&this->thisUpdate),
+							asn1_from_time(&this->nextUpdate),
 							asn1_wrap(ASN1_SEQUENCE, "m", certList),
 							extensions);