Bug ID 885869: Incorrect time used with iQuery SSL certificates utilizing GenericTime instead of UTCTime

Last Modified: Oct 16, 2023

Affected Product(s):
BIG-IP GTM(all modules)

Known Affected Versions:
14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 14.1.2.7, 14.1.2.8, 14.1.3, 14.1.3.1, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.0.1.4, 15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5

Fixed In:
16.0.0, 15.1.5.1, 14.1.4

Opened: Feb 27, 2020

Severity: 4-Minor

Symptoms

iQuery incorrectly interprets iQuery SSL certificate times when they are using GenericTime instead of UTCTime.

Impact

Internal years are interpreted to be much later than they should be.

Conditions

An iQuery certificate using GenericTime instead of UTCTime. Note that this would only occur with a date beyond the year 2049.

Workaround

Use SSL certificates with UTCTime instead of GenericTime.

Fix Information

Fixed an issue in iQuery SSL where GenericTime-formatted years interpreted incorrectly.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips