David Howells bda850cd21 PKCS#7: Make trust determination dependent on contents of trust keyring ...

Make the determination of the trustworthiness of a key dependent on whether
a key that can verify it is present in the supplied ring of trusted keys
rather than whether or not the verifying key has KEY_FLAG_TRUSTED set.

verify_pkcs7_signature() will return -ENOKEY if the PKCS#7 message trust
chain cannot be verified.

Signed-off-by: David Howells <dhowells@redhat.com>

2016-04-06 16:14:24 +01:00

..

.gitignore

certs: add .gitignore to stop git nagging about x509_certificate_list

2015-10-21 15:18:35 +01:00

Kconfig

KEYS: Reserve an extra certificate symbol for inserting without recompiling

2016-02-26 15:30:20 +00:00

Makefile

modsign: hide openssl output in silent builds

2016-02-26 11:16:38 +00:00

system_certificates.S

certs: Fix misaligned data in extra certificate list

2016-02-29 14:44:30 +00:00

system_keyring.c

PKCS#7: Make trust determination dependent on contents of trust keyring

2016-04-06 16:14:24 +01:00