4 Commits

Author	SHA1	Message	Date
Simon J. Gerraty	ab4f0a1518	Add -S option to veriexec ... During software installation, use veriexec -S to strictly enforce certificate validity checks (notBefore, notAfter). Otherwise ignore certificate validity period. It is generally unacceptible for the Internet to stop working just because someone did not upgrade their infrastructure for a decade. Sponsored by: Juniper Networks, Inc. Reviewed by: sebastien.bini_stormshield.eu Differential Revision: https://reviews.freebsd.org/D35758	2022-07-19 08:59:53 -07:00
Simon J. Gerraty	a8189e9bd4	veriexec(8): explain that only a unique prefix is required ... When setting or querying state it is sufficient to provide only enough of the state name to be unambiguous.	2022-02-14 13:54:22 -08:00
Gordon Bergling	39dd0ed993	veriexec(8): Bugfix for an issue reported by mandoc ... - consider using OS macro: Nx MFC after: 1 week	2020-10-03 18:46:42 +00:00
Simon J. Gerraty	eb12b8ea5e	Add verifying manifest loader for mac_veriexec ... This tool will verify a signed manifest and load contents into mac_veriexec for storage Sponsored by: Juniper Networks Differential Revision: D16575	2019-02-26 06:17:23 +00:00