PKCS#7: Verify internal certificate chain
authorDavid Howells <dhowells@redhat.com>
Tue, 1 Jul 2014 15:40:19 +0000 (16:40 +0100)
committerDavid Howells <dhowells@redhat.com>
Tue, 8 Jul 2014 12:50:11 +0000 (13:50 +0100)
commit8c76d79393ccc9b89d9af402d79a49a9cd43c5aa
tree482d70a25d548d0a82d08ac0bb9e2749b388d633
parenta4730357ee724f8c64f0292541ba3da8a95510fb
PKCS#7: Verify internal certificate chain

Verify certificate chain in the X.509 certificates contained within the PKCS#7
message as far as possible.  If any signature that we should be able to verify
fails, we reject the whole lot.

Signed-off-by: David Howells <dhowells@redhat.com>
Acked-by: Vivek Goyal <vgoyal@redhat.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
crypto/asymmetric_keys/pkcs7_verify.c