Skip to content
This repository has been archived by the owner on Feb 19, 2020. It is now read-only.

Remove two-digit-year variants from certificate validity date decoding #461

Closed
bear opened this issue Sep 2, 2017 · 8 comments
Closed

Comments

@bear
Copy link
Collaborator

bear commented Sep 2, 2017

Issue reported via Debian - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864257

Patch was given so i'm applying it and will spin up a point release.

@bear
Copy link
Collaborator Author

bear commented Sep 2, 2017

fixed in v1.3.3 and merged into current develop branch

@bear bear closed this as completed Sep 2, 2017
@bdauvergne
Copy link

bdauvergne commented Sep 30, 2017

This fix is wrong, it broke support for UTCTime, I published a pull request with a fix, but it would be probably better to revert this commit and move the conversion to string inside the if/else blocks (the original problem was that premature conversion to string broke the isinstance() test).

@mickeprag
Copy link

I agree with bdauvergne that the fix is not working. This break since my certificate do report the year using only two digits...

@skoczen
Copy link

skoczen commented Oct 19, 2017

@bear Another +1 to this being an problematic fix - 1.3.3 is currently broken on all hipchat servers due to invalid cert, 1.3.2 works fine.

@starstuck
Copy link

I think, that library should support both variants. I have proposed a pull request #472, that uses pyasn1 library methods for dates conversion, rather than parsing String representation. I think this will help with your problem as well, but I have not tested it with hipchat servers.

@mfin
Copy link

mfin commented Dec 14, 2017

I agree, library should support both formats.

@jogzug7
Copy link

jogzug7 commented Jan 11, 2018

Please reopen this bug. IMHO, the "fix" was wrong. See also https://bugs.debian.org/864257 which is reopened.

@Neustradamus
Copy link

Neustradamus commented Nov 30, 2018

There is a real fix?

  • 1.3.3 is broken
  • 1.3.2 is ok

chris34 added a commit to inyokaproject/inyoka that referenced this issue May 13, 2019
1.3.3 is broken as of fritzy/SleekXMPP#461. Someone seems to have forget to adapt the requirements after the first deployment in 2017 of 7e9e016.

Fore reference the exception is

```
ValueError

time data '190530023040Z' does not match format '%Y%m%d%H%M%SZ'
```
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

9 participants