Re: [PATCH] X.509: Remove validity check of certificate date

2013-09-25 Thread joeyli
於 三，2013-09-25 於 11:03 +0200，Alexander Holler 提到： > (I've resend this message, because the one I've replied to contained > contained kernel@vger... and not linux-kernel@vger... as addressee) > > I've already sent exactly the same patch here: > > http://lkml.org/lkml/2013/3/27/449 > > and here:

Re: [PATCH] X.509: Remove validity check of certificate date

2013-09-25 Thread Alexander Holler
(I've resend this message, because the one I've replied to contained contained kernel@vger... and not linux-kernel@vger... as addressee) I've already sent exactly the same patch here: http://lkml.org/lkml/2013/3/27/449 and here: https://lkml.org/lkml/2013/6/6/207 but for some unspoken reason

[PATCH] X.509: Remove validity check of certificate date

2013-09-24 Thread Lee, Chun-Yi
The check of valid_from and valid_to fields on X.509 certificate is a time bomb to MODSIGN function, It causes kernel module could not be load because the RTC on system may messed by user action (e.g. refresh BIOS) that should not be trusted. Base on the discussion of David Howells's "[PATCH] X.50