3 ms·
There’s a catch 22 for signed binaries that use PKI where you can’t install the firmware update without verifying the signature.
by goalieca 6y ago
There’s a catch 22 for signed binaries that use PKI where you can’t install the firmware update without verifying the signature.
- grishka 6y agoWell, then you have to set the system time to back when the certificate was valid.
- abiogenesis 6y agoA compromised CA is still valid, so you should be able to replace it with a non-compromised one before the expiry date.