Skip to content
Snippets Groups Projects
Commit bda850cd authored by David Howells's avatar David Howells
Browse files

PKCS#7: Make trust determination dependent on contents of trust keyring 


Make the determination of the trustworthiness of a key dependent on whether
a key that can verify it is present in the supplied ring of trusted keys
rather than whether or not the verifying key has KEY_FLAG_TRUSTED set.

verify_pkcs7_signature() will return -ENOKEY if the PKCS#7 message trust
chain cannot be verified.

Signed-off-by: default avatarDavid Howells <dhowells@redhat.com>
parent e68503bd
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
Showing
with 11 additions and 32 deletions
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment