219524 - Support GeneralizedTime in S/MIME libraries

Status: RESOLVED FIXED

(NSS :: Libraries, defect)

Description

[Julien Pierre]

Currently, we only support the UTCTime encoding, which can only encode dates up
to the year 2049 . We need to support a CHOICE of either UTCTime or GeneralizedTime.
I have been working on a patch for this. It works OK. But I'm not sure if the
S/MIME test coverage is good enough, so I'm making this a separate bug from 143334.

Comment 1

[Julien Pierre]

Attachment: Allow GeneralizedTime encoding for signatures in S/MIME library

Comment 2

[Wan-Teh Chang]

Comment on attachment 131641 [details] [diff] [review]
Allow GeneralizedTime encoding for signatures in S/MIME library

r=wtc.	Looks good to me.

Does CERT_SaveSMimeProfile fail if the signing time is
in GeneralizedTime format?

Comment 3

[Julien Pierre]

Currently the answer is yes - it fails with a GeneralizedTime passed in.

I just found out that I had included a patch to "fix" that, because I'm only
working from a single source tree. That "fix" in the patch for bug 143334 in
stanpcertdb.c that I asked you to review last week. That part of the patch
shouldn't be checked in since it changes the DB format for dates after 2050.
We can leave it out and keep it failing. Or we could re-encode to UTCTime if the
date is in GeneralizedTime and before 2050, but I don't think that's worth it
since it's never supposed to happen.

Comment 4

[Julien Pierre]

FYI, I verified that S/MIME tests still pass with this patch but not the
stanpcertdb fix.

Comment 5

[Julien Pierre]

Attachment: use CERT_TimeChoiceTemplate instead of CERT_InlineChoiceTemplate

Comment 6

[Nelson Bolyard (seldom reads bugmail)]

Comment on attachment 131653 [details] [diff] [review]
use CERT_TimeChoiceTemplate instead of CERT_InlineChoiceTemplate

sr=MisterSSL

Comment 7

[Julien Pierre]

Fixed.

cvs commit: Examining .
Checking in cmsattr.c;
/cvsroot/mozilla/security/nss/lib/smime/cmsattr.c,v  <--  cmsattr.c
new revision: 1.6; previous revision: 1.5
done
Checking in cmssiginfo.c;
/cvsroot/mozilla/security/nss/lib/smime/cmssiginfo.c,v  <--  cmssiginfo.c
new revision: 1.18; previous revision: 1.17
done