EDK2 capsule signing certificate expired

[philipanda]

Component

Dasharo firmware

Device

other

Dasharo version

n/a

Dasharo Tools Suite version

n/a

Test case ID

n/a

Brief summary

The certificate shipped along capsules is expired according to EDK2's GenerateCapsule

How reproducible

n/a

How to reproduce

novacustom_v56x_mtl_dgpu_v1.0.0-rc10 binaries were found to be affected.
Run GenerateCapsule -q --decode novacustom_v56x_mtl_dgpu_v1.0.0-rc10.cap

Expected behavior

Capsule is verified and decoded

Actual behavior

Verification failure
4077BE3E287F0000:error:10800075:PKCS7 routines:PKCS7_verify:certificate verify error:crypto/pkcs7/pk7_smime.c:296:Verify error: certificate has expired

Screenshots

No response

Additional context

No response

Solutions you've tried

No response

[SergiiDmytruk]

It was expired from the start, so the error was probably there all this time:

$ openssl x509 -text -in TestCert.pem | grep -A2 Validity
        Validity
            Not Before: Apr 10 08:38:04 2017 GMT
            Not After : Apr 10 08:38:04 2018 GMT

We can generate a new one and use it instead, the signature isn't really enforced yet (until #1442 is done).