]> git.ipfire.org Git - thirdparty/systemd.git/commit
projects / thirdparty / systemd.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: dab2a82) | patch
creds: reject empty validity intervals 43040/head
authordongshengyuan <545258830@qq.com>
Thu, 16 Jul 2026 06:44:08 +0000 (14:44 +0800)
committerdongshengyuan <545258830@qq.com>
Sat, 18 Jul 2026 07:53:00 +0000 (15:53 +0800)
commit7a81ad4b6bf8b986b50edd788d597f77673e9be6
tree5c77f678614f4da4da8bdebd546ee240083f897etree | snapshot
parentdab2a82a30355c8f1fc51c6655bdc2c5f5844755commit | diff
creds: reject empty validity intervals

Reject credentials whose not-after timestamp is equal to the timestamp
at each encryption entry point.

Reproducer: systemd-creds --timestamp=TS --not-after=TS encrypt in out

Before: encryption succeeded, but decrypt refused the credential as not
in order.

Follow-up: 21bc0b6fa1de44b520353b935bf14160f9f70591
src/creds/creds.c diff | blob | blame | history
src/shared/creds-util.c diff | blob | blame | history
test/units/TEST-54-CREDS.sh diff | blob | blame | history
Unnamed repository; edit this file 'description' to name the repository.