x509_time.h

Go to the documentation of this file.

// Copyright (c) Microsoft Corporation. All rights reserved.
// Licensed under the Apache 2.0 License.
#pragma once
 
#include "ccf/crypto/openssl/openssl_wrappers.h"
#include "ccf/ds/x509_time_fmt.h"
 
#include <openssl/asn1.h>
 
namespace ccf::crypto::OpenSSL
{
  static inline bool validate_chronological_times(
    const Unique_X509_TIME& time_before,
    const Unique_X509_TIME& time_after,
    const std::optional<uint32_t>& allowed_diff_days = std::nullopt)
  {
    int diff_days = 0;
    int diff_secs = 0;
    CHECK1(ASN1_TIME_diff(&diff_days, &diff_secs, time_before, time_after));
 
    return (diff_days > 0 || diff_secs > 0) &&
      (!allowed_diff_days.has_value() ||
       (unsigned int)diff_days <= allowed_diff_days.value());
  }
 
  static inline std::string to_x509_time_string(const ASN1_TIME* time)
  {
    std::tm t;
    CHECK1(ASN1_TIME_to_tm(time, &t));
    return ccf::ds::to_x509_time_string(t);
  }
}