diff options
| author | Ying-Chun Liu (PaulLiu) <paulliu@debian.org> | 2021-01-05 23:42:36 +0800 |
|---|---|---|
| committer | Ying-Chun Liu (PaulLiu) <paulliu@debian.org> | 2021-01-19 22:22:36 +0800 |
| commit | 1d48a014c3a97285215b5af703152d50504751f2 (patch) | |
| tree | 28ff47331b1c0eb60cf28e6c83464a90efe09e4c | |
| parent | 53ddf369508608bd21df8182b72726c67bfcabfb (diff) | |
workaround: disable verify time of signer and signee.
Signed-off-by: Ying-Chun Liu (PaulLiu) <paulliu@debian.org>
| -rw-r--r-- | lib/crypto/pkcs7_verify.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/crypto/pkcs7_verify.c b/lib/crypto/pkcs7_verify.c index 58683ef614c..6458a5df79d 100644 --- a/lib/crypto/pkcs7_verify.c +++ b/lib/crypto/pkcs7_verify.c @@ -529,7 +529,7 @@ static int pkcs7_verify_one(struct pkcs7_message *pkcs7, if (sinfo->signing_time < sinfo->signer->valid_from || sinfo->signing_time > sinfo->signer->valid_to) { pr_warn("Message signed outside of X.509 validity window\n"); - return -EKEYREJECTED; + //return -EKEYREJECTED; } } |