[PATCH 4/4] module: Support to disable validity enforcement in runtime

2018-03-07 Thread Jia Zhang
In order to disable the module validity enforcement, writing a PKCS#7 signature corresponding the signed content '0' is required. Given a simple way to archive this: $ echo -n 0 > data $ openssl smime -sign -nocerts -noattr -binary -in data \ -inkey -signer -outform der \ -out data.sig

[PATCH 4/4] module: Support to disable validity enforcement in runtime

2018-03-07 Thread Jia Zhang
In order to disable the module validity enforcement, writing a PKCS#7 signature corresponding the signed content '0' is required. Given a simple way to archive this: $ echo -n 0 > data $ openssl smime -sign -nocerts -noattr -binary -in data \ -inkey -signer -outform der \ -out data.sig