From 87a0afed5db7e916a6ad6715e14996b2e25641d7 Mon Sep 17 00:00:00 2001 From: Stef Walter Date: Wed, 27 Mar 2013 17:54:38 +0100 Subject: Don't try to guess at overflowing time values on 32-bit systems Since CKA_START_DATE and CKA_END_DATE are the only places where we want to parse out times, and these are optional, just leave blank if the time overflows what libc can handle on a 32-bit system. https://bugs.freedesktop.org/show_bug.cgi?id=62825 --- build/certs/Makefile.am | 3 +++ build/certs/distant-end-date.der | Bin 0 -> 366 bytes 2 files changed, 3 insertions(+) create mode 100644 build/certs/distant-end-date.der (limited to 'build') diff --git a/build/certs/Makefile.am b/build/certs/Makefile.am index 0a46b56..4231591 100644 --- a/build/certs/Makefile.am +++ b/build/certs/Makefile.am @@ -45,3 +45,6 @@ build-self-signed: openssl req -new -x509 -outform DER -out self-signed-with-ku.der \ -newkey rsa -keyout /dev/null -nodes -subj /CN=self-signed-with-ku.example.com \ -config with-ku.conf -set_serial 888 -extensions v3_ca + openssl req -new -x509 -outform DER -out distant-end-date.der \ + -newkey rsa:512 -keyout /dev/null -nodes -subj /CN=far-in-the-future.example.com \ + -config with-ku.conf -set_serial 999 -extensions v3_ca -days 20000 diff --git a/build/certs/distant-end-date.der b/build/certs/distant-end-date.der new file mode 100644 index 0000000..1b3fd47 Binary files /dev/null and b/build/certs/distant-end-date.der differ -- cgit v1.1