An expiration time of (time_t)-1 will set to the no well-defined expiration date value.

2 files changed, 8 insertions, 0 deletions

diff --git a/lib/x509/common.c b/lib/x509/common.c
index ee8478dc99..e94efcd0ee 100644
--- a/lib/x509/common.c
+++ b/lib/x509/common.c
@@ -727,6 +727,12 @@ gtime2generalTime (time_t gtime, char *str_time, size_t str_time_size)
 {
   size_t ret;
   struct tm _tm;
+	
+  if (gtime == (time_t)-1) 
+    {
+       	snprintf(str_time, str_time_size, "99991231235959Z");
+       	return 0;
+    }
 
   if (!gmtime_r (&gtime, &_tm))
     {
diff --git a/lib/x509/x509_write.c b/lib/x509/x509_write.c
index c5e854e71c..c9ade9ff3a 100644
--- a/lib/x509/x509_write.c
+++ b/lib/x509/x509_write.c
@@ -909,6 +909,8 @@ gnutls_x509_crt_set_activation_time (gnutls_x509_crt_t cert, time_t act_time)
  * @exp_time: The actual time
  *
  * This function will set the time this Certificate will expire.
+ * Setting an expiration time of (time_t)-1 will set to the
+ * no well-defined expiration date value. 
  *
  * Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
  *   negative error value.