Changeset 64731 in vbox for trunk/src/VBox/Runtime/tools

Timestamp:

Nov 21, 2016 2:35:37 PM (8 years ago)

Author:

vboxsync

Message:

SUP,IPRT: If link time validation fails with VERR_CR_X509_CPV_NOT_VALID_AT_TIME, retry with current time.

File:

• trunk/src/VBox/Runtime/tools/RTSignTool.cpp (modified) (1 diff)

trunk/src/VBox/Runtime/tools/RTSignTool.cpp

@@ -437 +437 @@
         if (RT_SUCCESS(rc))
             RTMsgInfo("'%s' is valid.\n", pszFilename);
-        else
+        else if (rc == VERR_CR_X509_CPV_NOT_VALID_AT_TIME)
+        {
+            RTTIMESPEC Now;
+            pState->uTimestamp = RTTimeSpecGetSeconds(RTTimeNow(&Now));
+            rc = RTLdrVerifySignature(hLdrMod, VerifyExeCallback, pState, RTErrInfoInitStatic(pStaticErrInfo));
+            if (RT_SUCCESS(rc))
+                RTMsgInfo("'%s' is valid now, but not at link time.\n", pszFilename);
+        }
+        if (RT_FAILURE(rc))
             RTMsgError("RTLdrVerifySignature failed on '%s': %Rrc - %s\n", pszFilename, rc, pStaticErrInfo->szMsg);
     }