Messages in this thread | | | Date | Tue, 25 Sep 2012 17:43:43 +0200 | From | Paolo Bonzini <> | Subject | Re: Wrong system clock vs X.509 date specifiers |
| |
Il 25/09/2012 17:35, David Howells ha scritto: > Alan Cox <alan@lxorguk.ukuu.org.uk> wrote: > >> > Generate a certificate that is valid from a few minutes before the >> > wallclock time. It's a certificate policy question not a kernel hackery >> > one. > That doesn't seem to be possible with openssl req. What would you recommend?
Disgusting, but: add an LD_PRELOAD library that returns a time well in the past.
Paolo
| |