[rt-commit] r230 - /redwax-tool/trunk/redwax_openssl.c

[rt-commit at redwax.eu]

Author: minfrin at redwax.eu
Date: Wed Jul 22 19:06:08 2026
New Revision: 230

Log:
Reinstate X509_get0_notAfter for the benefit of the time
difference check when using openssl4.

Modified:
    redwax-tool/trunk/redwax_openssl.c

Modified: redwax-tool/trunk/redwax_openssl.c
==============================================================================
--- redwax-tool/trunk/redwax_openssl.c	(original)
+++ redwax-tool/trunk/redwax_openssl.c	Wed Jul 22 19:06:08 2026
@@ -6625,12 +6625,13 @@
         const redwax_certificate_t *c1, const redwax_certificate_t *c2)
 {
     X509 *x1, *x2;
-    const ASN1_TIME *a1, *a2, *b1, *b2;
+    const ASN1_TIME *a1, *a2;
     const unsigned char *der;
 #if HAVE_X509_CHECK_CERTIFICATE_TIMES
     X509_VERIFY_PARAM *vpm;
     int v1, v2;
 #else
+    const ASN1_TIME *b1, *b2;
     int bc1, bc2, ac1, ac2;
 #endif
     int pday, psec, diff;
@@ -6700,6 +6701,9 @@
         X509_free(x2);
         return LEFT;
     }
+
+    a1 = X509_get0_notAfter(x1);
+    a2 = X509_get0_notAfter(x2);
 
 #else