WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

Re: [Xen-users] Re: Unsigned GPLPV drivers

To: Klaus Steinberger <klaus.steinberger@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: [Xen-users] Re: Unsigned GPLPV drivers
From: Oliver Hookins <oliver.hookins@xxxxxxxxxxxxx>
Date: Thu, 16 Jul 2009 12:51:47 +1000
Cc: xen-users@xxxxxxxxxxxxxxxxxxx
Delivery-date: Wed, 15 Jul 2009 19:52:35 -0700
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
In-reply-to: <4A5D99C6.1040106@xxxxxxxxxxxxxxxxxxxxxx>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References: <20090715081434.8735127B96@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx> <4A5D99C6.1040106@xxxxxxxxxxxxxxxxxxxxxx>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
User-agent: Mutt/1.5.17+20080114 (2008-01-14)
On Wed Jul 15, 2009 at 10:56:38 +0200, Klaus Steinberger wrote:
> > I was under the impression that using bcdedit to set the
> > DDISABLE_INTEGRITY_CHECKS loadoption and nointegritychecks option would
> > remove any restrictions on using unsigned drivers, but it would appear 
> this
> > perhaps on applies to Vista, not Windows 2008.
>
> It even does not work in Vista (starting with SP1).
>
> Only way is to use Ready Driver Plus

Yes, I ran that once and my general feeling is that it's a very hacky
"solution".

Is there any likelihood of the GPLPV drivers getting signed with a "real"
certificate? The Microsoft documents on driver signing are a bit vague on
what is actually required but it doesn't seem as if the full WHQL testing
needs to be done, you only need an SPC certificate from a trusted CA. For
example Comodo are selling code signing certs for $179 for a year.

Could "anyone" then purchase one of these certificates and sign the GPLPV
drivers?

-- 
Regards,
Oliver Hookins

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

<Prev in Thread] Current Thread [Next in Thread>