lkml.org 
[lkml]   [2014]   [Jul]   [9]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    Subject[PATCH17/17] pefile: Validate PKCS#7 trust chain
    From
    Date
    Validate the PKCS#7 trust chain against the contents of the system keyring.

    Signed-off-by: David Howells <dhowells@redhat.com>
    Acked-by: Vivek Goyal <vgoyal@redhat.com>
    ---

    crypto/asymmetric_keys/verify_pefile.c | 2 +-
    1 file changed, 1 insertion(+), 1 deletion(-)


    diff --git a/crypto/asymmetric_keys/verify_pefile.c b/crypto/asymmetric_keys/verify_pefile.c
    index 029a365..79175e6 100644
    --- a/crypto/asymmetric_keys/verify_pefile.c
    +++ b/crypto/asymmetric_keys/verify_pefile.c
    @@ -449,7 +449,7 @@ int verify_pefile_signature(const void *pebuf, unsigned pelen,
    if (ret < 0)
    goto error;

    - ret = -ENOANO; // Not yet complete
    + ret = pkcs7_validate_trust(pkcs7, trusted_keyring, _trusted);

    error:
    pkcs7_free_message(ctx.pkcs7);


    \
     
     \ /
      Last update: 2014-07-13 05:21    [W:3.958 / U:0.724 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site