DerUtcTime.ToAdjustedDateTime() fails for Apple Mail messages

[bcgit]

DerUtcTime.ToAdjustedDateTime() fails for Apple Mail messages

[peterdettman]

A putative seconds value of 60 makes this an invalid UTCTime string. See X.680-0207 [1], 43.3 b) 2). Even if you were inclined to "accept" it, it still wouldn't be the canonical encoding that a signature requires. So, NotABug in BC, recommend you reject in MimeKit.

[1] http://www.itu.int/ITU-T/studygroups/com17/languages/X.680-0207.pdf

[jstedfast]

okay, thanks - I kinda figured as much, but wasn't sure.

[peterdettman]

Incidentally, it appears a GeneralizedTime would allow seconds=60, since it is defined by ISO 8601 [1], which appears to allow for a leap second, i.e. a distinct tick from the next 'mm00'. You'd still have to check that it was used appropriately, and "150213165460" does not strike me as a valid leap second!

[1] http://en.wikipedia.org/wiki/ISO_8601#Times

[jstedfast]

Indeed. According to WIkipedia:

The most recent one happened on June 30, 2012 at 23:59:60 UTC.[1] A leap
second will again be inserted at the end of June 30, 2015 at 23:59:60 UTC.[2]

[jstedfast]

Anyway, thanks for looking into this, Peter.

[peterdettman]

No problem. Will you report this against the responsible mail client?