[compat] Store#time= accepts numeric epoch seconds like CRuby

CRuby's time= uses NUM2LONG(rb_Integer(time)) which accepts Time,
Integer, Float, or anything responding to #to_int. JRuby was storing
the value as-is but StoreContext cast it to RubyTime, crashing on
non-Time values. Now both Store#time= and StoreContext#time= convert
via a shared toTime helper.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: kares

src/main/java/org/jruby/ext/openssl/X509Store.java

@@ -37,6 +37,7 @@
 import org.jruby.RubyFixnum;
 import org.jruby.RubyModule;
 import org.jruby.RubyNumeric;
+import org.jruby.RubyTime;
 import org.jruby.RubyObject;
 import org.jruby.anno.JRubyMethod;
 import org.jruby.exceptions.RaiseException;
@@ -148,11 +149,20 @@ public IRubyObject set_trust(final IRubyObject arg) {
     }
 
     @JRubyMethod(name = "time=")
-    public IRubyObject set_time(final IRubyObject arg) {
-        setInstanceVariable("@time", arg);
+    public IRubyObject set_time(final ThreadContext context, final IRubyObject arg) {
+        // match CRuby: NUM2LONG(rb_Integer(time)) — accepts Time, Integer, or
+        // anything convertible via #to_int, and stores epoch seconds internally
+        setInstanceVariable("@time", toTime(context, arg));
         return arg;
     }
 
+    static RubyTime toTime(final ThreadContext context, final IRubyObject arg) {
+        if (arg instanceof RubyTime) return (RubyTime) arg;
+        // numeric (epoch seconds) — convert via Time.at
+        long epoch = RubyNumeric.num2long(arg.callMethod(context, "to_int"));
+        return RubyTime.newTime(context.runtime, epoch * 1000);
+    }
+
     @JRubyMethod
     public IRubyObject add_path(final ThreadContext context, final IRubyObject arg) {
         warn(context, "WARNING: unimplemented method called: OpenSSL::X509::Store#add_path");

src/main/java/org/jruby/ext/openssl/X509StoreContext.java

@@ -143,7 +143,7 @@ public IRubyObject initialize(final ThreadContext context, final IRubyObject[] a
         }
 
         IRubyObject time = store.getInstanceVariables().getInstanceVariable("@time");
-        if ( ! time.isNil() ) set_time(time);
+        if ( ! time.isNil() ) set_time(context, time);
         IRubyObject verify_callback = store.verify_callback_internal();
         if (verify_callback != null) this.setInstanceVariable("@verify_callback", verify_callback);
         if (cert != null) this.setInstanceVariable("@cert", cert);
@@ -268,8 +268,9 @@ public IRubyObject set_trust(final ThreadContext context, final IRubyObject arg)
     }
 
     @JRubyMethod(name = "time=")
-    public IRubyObject set_time(IRubyObject arg) {
-        storeContext.setTime( 0, ( (RubyTime) arg ).getJavaDate() );
+    public IRubyObject set_time(final ThreadContext context, IRubyObject arg) {
+        RubyTime time = X509Store.toTime(context, arg);
+        storeContext.setTime( 0, time.getJavaDate() );
         return arg;
     }
 

src/test/ruby/x509/test_x509store.rb

@@ -101,6 +101,16 @@ def test_add_file_raises_with_invalid_pem # GH-285
     assert_raise(OpenSSL::X509::StoreError) { store.add_file(invalid) }
   end
 
+  # CRuby's Store#time= accepts Time, Integer, and Float (epoch seconds).
+  # Ported from CRuby's test/openssl/test_x509store.rb (time-based verification).
+  def test_store_time_accepts_integer
+    store = OpenSSL::X509::Store.new
+    store.add_file @ca_cert
+    # set time as integer epoch seconds — must not raise
+    store.time = Time.now.to_i
+    assert store.verify(@cert)
+  end
+
   def test_use_non_existing_cert_file
     ENV['SSL_CERT_FILE'] = 'non-existing-file.crt'
     store = OpenSSL::X509::Store.new