An expiration time of (time_t)-1 will set to the no well-defined expiration date value.

2 files changed, 7 insertions, 0 deletions

diff --git a/lib/x509/common.c b/lib/x509/common.c
index 53cae80c06..dea8c03b96 100644
--- a/lib/x509/common.c
+++ b/lib/x509/common.c
@@ -706,6 +706,11 @@ gtime2generalTime(time_t gtime, char *str_time, size_t str_time_size)
 {
 	size_t ret;
 	struct tm _tm;
+	
+	if (gtime == (time_t)-1) {
+        	snprintf(str_time, str_time_size, "99991231235959Z");
+        	return 0;
+	}
 
 	if (!gmtime_r(&gtime, &_tm)) {
 		gnutls_assert();
diff --git a/lib/x509/x509_write.c b/lib/x509/x509_write.c
index 71f5a5d0d4..79b084a70a 100644
--- a/lib/x509/x509_write.c
+++ b/lib/x509/x509_write.c
@@ -884,6 +884,8 @@ gnutls_x509_crt_set_activation_time(gnutls_x509_crt_t cert,
  * @exp_time: The actual time
  *
  * This function will set the time this Certificate will expire.
+ * Setting an expiration time of (time_t)-1 will set to the
+ * no well-defined expiration date value. 
  *
  * Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
  *   negative error value.