David Howells a5752d11b3 MODSIGN: Fix 32-bit overflow in X.509 certificate validity date checking ... The current choice of lifetime for the autogenerated X.509 of 100 years, putting the validTo date in 2112, causes problems on 32-bit systems where a 32-bit time_t wraps in 2106. 64-bit x86_64 systems seem to be unaffected. This can result in something like: Loading module verification certificates X.509: Cert 6e03943da0f3b015ba6ed7f5e0cac4fe48680994 has expired MODSIGN: Problem loading in-kernel X.509 certificate (-127) Or: X.509: Cert 6e03943da0f3b015ba6ed7f5e0cac4fe48680994 is not yet valid MODSIGN: Problem loading in-kernel X.509 certificate (-129) Instead of turning the dates into time_t values and comparing, turn the system clock and the ASN.1 dates into tm structs and compare those piecemeal instead. Reported-by: Rusty Russell <rusty@rustcorp.com.au> Signed-off-by: David Howells <dhowells@redhat.com> Acked-by: Josh Boyer <jwboyer@redhat.com> Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>		2012-10-10 20:06:37 +10:30
..
asymmetric_keys	MODSIGN: Fix 32-bit overflow in X.509 certificate validity date checking	2012-10-10 20:06:37 +10:30
async_tx
ablkcipher.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2012-04-10 14:30:45 -04:00
aead.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2012-04-10 14:30:45 -04:00
aes_generic.c
af_alg.c
ahash.c	crypto: Stop using NLA_PUT*().	2012-04-02 04:33:42 -04:00
algapi.c	crypto: algapi - Move larval completion into algboss	2012-06-22 20:08:29 +08:00
algboss.c	crypto: algapi - Fix hang on crypto allocation	2012-06-27 20:59:12 +08:00
algif_hash.c
algif_skcipher.c
ansi_cprng.c
anubis.c
api.c
arc4.c	crypto: arc4 - improve performance by using u32 for ctx and variables	2012-06-14 10:07:23 +08:00
authenc.c	crypto: authenc - Fix crash with zero-length assoc data	2012-09-11 12:05:45 +08:00
authencesn.c
blkcipher.c	crypto: Stop using NLA_PUT*().	2012-04-02 04:33:42 -04:00
blowfish_common.c
blowfish_generic.c
camellia_generic.c
cast5.c
cast6.c
cbc.c
ccm.c
chainiv.c
cipher.c
compress.c
crc32c.c	crypto: crc32c should use library implementation	2012-03-23 16:58:38 -07:00
cryptd.c
crypto_null.c
crypto_user.c	netlink: add netlink_kernel_cfg parameter to netlink_kernel_create	2012-06-29 16:46:02 -07:00
crypto_wq.c
ctr.c
cts.c
deflate.c
des_generic.c
ecb.c
eseqiv.c
fcrypt.c
fips.c
gcm.c
gf128mul.c
ghash-generic.c
hmac.c
internal.h	crypto: algapi - Move larval completion into algboss	2012-06-22 20:08:29 +08:00
Kconfig	KEYS: Implement asymmetric key type	2012-10-08 13:50:12 +10:30
khazad.c
krng.c
lrw.c
lzo.c
Makefile	KEYS: Implement asymmetric key type	2012-10-08 13:50:12 +10:30
md4.c
md5.c
michael_mic.c
pcbc.c
pcompress.c	crypto: Stop using NLA_PUT*().	2012-04-02 04:33:42 -04:00
pcrypt.c	crypto: pcrypt - Use the online cpumask as the default	2012-03-29 19:52:47 +08:00
proc.c
ripemd.h
rmd128.c
rmd160.c
rmd256.c
rmd320.c
rng.c	crypto: Stop using NLA_PUT*().	2012-04-02 04:33:42 -04:00
salsa20_generic.c
scatterwalk.c
seed.c
seqiv.c
serpent_generic.c
sha1_generic.c
sha256_generic.c
sha512_generic.c	crypto: sha512 - Fix byte counter overflow in SHA-512	2012-04-05 20:34:20 +08:00
shash.c	crypto: Stop using NLA_PUT*().	2012-04-02 04:33:42 -04:00
tcrypt.c	crypto: atmel - add new tests to tcrypt	2012-07-11 11:08:28 +08:00
tcrypt.h
tea.c
testmgr.c	crypto: testmgr - add aead cbc aes hmac sha1,256,512 test vectors	2012-07-11 11:08:30 +08:00
testmgr.h	crypto: testmgr - add aead cbc aes hmac sha1,256,512 test vectors	2012-07-11 11:08:30 +08:00
tgr192.c
twofish_common.c
twofish_generic.c
vmac.c
wp512.c
xcbc.c
xor.c	md updates for 3.5	2012-05-23 17:08:40 -07:00
xts.c
zlib.c