diff options
Diffstat (limited to 'security/keymint/support/authorization_set.cpp')
| -rw-r--r-- | security/keymint/support/authorization_set.cpp | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/security/keymint/support/authorization_set.cpp b/security/keymint/support/authorization_set.cpp index 3d44dff27c..8d4257101c 100644 --- a/security/keymint/support/authorization_set.cpp +++ b/security/keymint/support/authorization_set.cpp @@ -243,4 +243,12 @@ AuthorizationSetBuilder& AuthorizationSetBuilder::Padding( return *this; } +AuthorizationSetBuilder& AuthorizationSetBuilder::SetDefaultValidity() { + // Per RFC 5280 4.1.2.5, an undefined expiration (not-after) field should be set to + // GeneralizedTime 999912312359559, which is 253402300799000 ms from Jan 1, 1970. + constexpr uint64_t kUndefinedExpirationDateTime = 253402300799000; + Authorization(TAG_CERTIFICATE_NOT_BEFORE, 0); + return Authorization(TAG_CERTIFICATE_NOT_AFTER, kUndefinedExpirationDateTime); +} + } // namespace aidl::android::hardware::security::keymint |