The allocation failure was reported on the output BIO and then skipped
the certificate, so the command exited with status zero without having
checked anything. Report it on stderr and reach err: like every other
failure path, as deferred by commit 8da3880874 "apps/x509.c: failing
exit status on every failure path reaching err:".
Fixes: 4036f4b0e3 "Add new public API for checking certificate times."
Complements: 8da3880874 "apps/x509.c: failing exit status on every failure path reaching err:"
Assisted-by: Claude:claude-fable-5-1
Reviewed-by: Tomas Mraz <tomas@openssl.foundation>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Eugene Syromiatnikov <esyr@openssl.org>
Merge-date: Tue Oct 27 17:10:46 2026
Merged-from: https://github.com/openssl/openssl/pull/33104
Daniel Kubec
87af1458a7