[Pidgin] #15586: Use 64-bit value to represent times (was: Issue in parsing CA certificate)

Pidgin trac at pidgin.im
Mon Apr 22 18:59:49 EDT 2013


#15586: Use 64-bit value to represent times
--------------------+---------------------------
 Reporter:  params  |       Owner:  rekkanoryo
     Type:  defect  |      Status:  new
Milestone:  3.0.0   |   Component:  unclassified
  Version:  2.10.7  |  Resolution:
 Keywords:          |
--------------------+---------------------------
Changes (by datallah):

 * milestone:   => 3.0.0


Comment:

 It's really a terrible thing to MITM all SSL traffic via a proxy, but
 that's relatively unrelated to the problem.

 The reason it's *relatively* unrelated and not completely unrelated is
 that you probably won't find real certificates in the wild that expire
 after 2038-01-19 (the 32-bit unix timestamp barrier), but your certificate
 expires in 2063 (which is not really not a sane timeframe for a current
 certificate to expire).

 It isn't actually an issue with NSS, but rather a libpurple issue and is a
 real bug.

 The libpurple API uses `time_t` to store the effective and expiration
 dates and time_t is a 32-bit number on Windows with the default C runtime.
 It's also a 32-bit number on 32-bit Linux systems as far as I can tell.

 This isn't something that can be corrected without an API change (which
 can't happen until the 3.0.0 release of Pidgin).  Part of changing this
 behavior will likely mean that we need to use the glib date/time functions
 instead of the system functions (https://developer.gnome.org/glib/2.30
 /glib-Date-and-Time-Functions.html).

-- 
Ticket URL: <https://developer.pidgin.im/ticket/15586#comment:3>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list