| commit | 09fbc47373826d67531380662b516de2da120545 | [log] [tgz] |
|---|---|---|
| author | Mimi Zohar <zohar@linux.vnet.ibm.com> | Tue Aug 20 14:36:27 2013 -0400 |
| committer | David Howells <dhowells@redhat.com> | Wed Sep 25 17:17:01 2013 +0100 |
| tree | 4f2828a7114313c70eec4cef99f893dbe67c762b | |
| parent | af34cb0c3d16b46d88b661692b885d1d998a8ecb [diff] |
KEYS: verify a certificate is signed by a 'trusted' key Only public keys, with certificates signed by an existing 'trusted' key on the system trusted keyring, should be added to a trusted keyring. This patch adds support for verifying a certificate's signature. This is derived from David Howells pkcs7_request_asymmetric_key() patch. Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com> Signed-off-by: David Howells <dhowells@redhat.com>