Re: [PATCH v4 0/5] /dev/random - a new approach

2016-06-21 Thread Tomas Mraz
e). You have to trust the host for anything, not just for the entropy in timings. This is completely invalid argument unless you can present a method that one guest can manipulate timings in other guest in such a way that _removes_ the inherent entropy from the host. --

Re: Wrong system clock vs X.509 date specifiers

2012-09-25 Thread Tomas Mraz
On Tue, 2012-09-25 at 18:31 +0100, David Howells wrote: > Tomas Mraz wrote: > > > You can use openssl ca that allows to set arbitrary start date to > > generate selfsigned certs as well (-selfsign option). > > That seems to require some stuff I don't have installed

Re: Wrong system clock vs X.509 date specifiers

2012-09-25 Thread Tomas Mraz
m to be possible with openssl req. What would you recommend? You can use openssl ca that allows to set arbitrary start date to generate selfsigned certs as well (-selfsign option). -- Tomas Mraz No matter how far down the wrong road you've gone, turn back.