Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1758513Ab2JSLWB (ORCPT ); Fri, 19 Oct 2012 07:22:01 -0400 Received: from mx1.redhat.com ([209.132.183.28]:54731 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751032Ab2JSLWA (ORCPT ); Fri, 19 Oct 2012 07:22:00 -0400 Organization: Red Hat UK Ltd. Registered Address: Red Hat UK Ltd, Amberley Place, 107-111 Peascod Street, Windsor, Berkshire, SI4 1TE, United Kingdom. Registered in England and Wales under Company Registration No. 3798903 From: David Howells In-Reply-To: <87txtrpb1t.fsf@rustcorp.com.au> References: <87txtrpb1t.fsf@rustcorp.com.au> <3179.1350512382@warthog.procyon.org.uk> <87a9vko0z7.fsf@rustcorp.com.au> <20121018121154.GE2934@hansolo.jdub.homelinux.org> To: Rusty Russell Cc: dhowells@redhat.com, Linus Torvalds , Josh Boyer , David Miller , Linux Kernel Mailing List , pjones@redhat.com Subject: Re: RFC: sign the modules at install time Date: Fri, 19 Oct 2012 12:21:46 +0100 Message-ID: <2140.1350645706@warthog.procyon.org.uk> Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 965 Lines: 24 Rusty Russell wrote: > > (Side note: I hope people realize that the random key is generated > > with a 100-year lifespan. So if you build a kernel today, you do > > potentially have a "year-2112 problem". I'm not horribly worried, but > > I *am* a bit worried about 32-bit time_t overflow and I hope 32-bit > > openssl doesn't do anything odd) > > Yep, David's original patch had that problem; he fixed the kernel's x509 > handling to use struct tm, not time_t, and now it Just Works. That's assuming that 32-bit *openssl* gets it right when generating the key. Trying it on my 32-bit laptop, I see: 154:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :21120925112014Z so I guess it does. David -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/