From c5d566a4dab559f4d42c62181fcf314a4042bc6d Mon Sep 17 00:00:00 2001 From: Marc Hartmayer Date: Wed, 23 Jun 2021 13:15:10 +0000 Subject: [PATCH] genprotimg/crypto: use X509_get0_not(After|Before) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Use X509_get0_not(After|Before) since X509_get_notBefore() and X509_get_notAfter() were deprecated in OpenSSL 1.1.0 (see https://www.openssl.org/docs/man1.1.0/man3/X509_set1_notBefore.html). Github-ID: https://github.com/ibm-s390-linux/s390-tools/issues/112 Reviewed-by: Patrick Steuer Signed-off-by: Marc Hartmayer Signed-off-by: Jan Höppner --- genprotimg/src/utils/crypto.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/genprotimg/src/utils/crypto.c b/genprotimg/src/utils/crypto.c index 36379f06..2e4750b8 100644 --- a/genprotimg/src/utils/crypto.c +++ b/genprotimg/src/utils/crypto.c @@ -1655,8 +1655,8 @@ gint verify_host_key(X509 *host_key, GSList *issuer_pairs, } if (!(verify_flags & X509_V_FLAG_NO_CHECK_TIME)) { - const ASN1_TIME *last = X509_get_notBefore(host_key); - const ASN1_TIME *next = X509_get_notAfter(host_key); + const ASN1_TIME *last = X509_get0_notBefore(host_key); + const ASN1_TIME *next = X509_get0_notAfter(host_key); if (!last || !next || check_validity_period(last, next)) { g_set_error(err, PV_CRYPTO_ERROR,