tree e9d05eaea4ad42e982e1b46961201dc5d91d8492
parent 17334cabc814f8847975cddc0e29291af6093464
author David Howells <dhowells@redhat.com> 1371573644 +0100
committer David Howells <dhowells@redhat.com> 1380125821 +0100

X.509: Remove certificate date checks

Remove the certificate date checks that are performed when a certificate is
parsed.  There are two checks: a valid from and a valid to.  The first check is
causing a lot of problems with system clocks that don't keep good time and the
second places an implicit expiry date upon the kernel when used for module
signing, so do we really need them?

Signed-off-by: David Howells <dhowells@redhat.com>
cc: David Woodhouse <dwmw2@infradead.org>
cc: Rusty Russell <rusty@rustcorp.com.au>
cc: Josh Boyer <jwboyer@redhat.com>
cc: Alexander Holler <holler@ahsoftware.de>
cc: stable@vger.kernel.org