lkml.org 
[lkml]   [2012]   [Oct]   [18]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    SubjectRe: RFC: sign the modules at install time
    Date
    Linus Torvalds <torvalds@linux-foundation.org> writes:
    > So signing is the nice flexible option, and technically the right
    > thing to do.

    Meh.... It's 52k of extra text to get that 'nice flexible'; 1% of my
    kernel image. That's a lot of bug free code.

    > (Side note: I hope people realize that the random key is generated
    > with a 100-year lifespan. So if you build a kernel today, you do
    > potentially have a "year-2112 problem". I'm not horribly worried, but
    > I *am* a bit worried about 32-bit time_t overflow and I hope 32-bit
    > openssl doesn't do anything odd)

    Yep, David's original patch had that problem; he fixed the kernel's x509
    handling to use struct tm, not time_t, and now it Just Works.

    Cheers,
    Rusty.


    \
     
     \ /
      Last update: 2012-10-19 03:01    [W:2.512 / U:1.148 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site