certificates - validity - wrong values

RouterOS General
1

Hello,

I created a certificate for 36500 days (100 years).

openssl outputs the right validity of dates but in Winbox I only can see that it is valid for 6526 days (up to 01/01/2038).

Is this a problem in ROS with any old openssl release which cannot interpret the right validity?

Thanks.
RB_certificate.png

2

I guess it has to do with famous Linux timestamp wrap-around (32-bit counter) about to happen some time around 2038-01-19. Just heard that kernel 5.6 is the first 32-bit linux kernel which is year 2038 ready.

Probably the same applies to some user-land tools as well.

It’ll take some time before the modern kernel gets used in ROS I’m affraid.

3

Thanks.

But btw I now noticed that ovpn in ROS only supports md5 and sha1 (sha256, sha224, sha384, sha512). In beta UDP and sha256 are implemented but nowadays sha512 would be fine.