Re: [PATCH] test/py: efi_secboot: Remove unnecessary cert-to-efi-hash-list option

2022-10-03 Thread Takahiro Akashi
On Mon, Oct 03, 2022 at 04:12:15PM +0900, Masahisa Kojima wrote: > 'cert-to-efi-hash-list -t 0' does not work as expected, it produces > indeterminate timestamp. > > $ cert-to-efi-hash-list -t 0 -s 256 db.crt dbx_hash.crl > TimeOfRevocation is 0-113-0 00:00:255 > > If we need the CRL revoked

[PATCH] test/py: efi_secboot: Remove unnecessary cert-to-efi-hash-list option

2022-10-03 Thread Masahisa Kojima
'cert-to-efi-hash-list -t 0' does not work as expected, it produces indeterminate timestamp. $ cert-to-efi-hash-list -t 0 -s 256 db.crt dbx_hash.crl TimeOfRevocation is 0-113-0 00:00:255 If we need the CRL revoked for all the time, just don't specify '-t' option. $ cert-to-efi-hash-list