KEYS: verify a certificate is signed by a 'trusted' key
authorMimi Zohar <zohar@linux.vnet.ibm.com>
Tue, 20 Aug 2013 18:36:27 +0000 (14:36 -0400)
committerDavid Howells <dhowells@redhat.com>
Wed, 25 Sep 2013 16:17:01 +0000 (17:17 +0100)
commit09fbc47373826d67531380662b516de2da120545
tree4f2828a7114313c70eec4cef99f893dbe67c762b
parentaf34cb0c3d16b46d88b661692b885d1d998a8ecb
KEYS: verify a certificate is signed by a 'trusted' key

Only public keys, with certificates signed by an existing
'trusted' key on the system trusted keyring, should be added
to a trusted keyring.  This patch adds support for verifying
a certificate's signature.

This is derived from David Howells pkcs7_request_asymmetric_key() patch.

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Signed-off-by: David Howells <dhowells@redhat.com>
crypto/asymmetric_keys/x509_public_key.c