| commit | bda850cd214e90b1be0cc25bc48c4f6ac53eb543 | [log] [tgz] |
|---|---|---|
| author | David Howells <dhowells@redhat.com> | Wed Apr 06 16:14:24 2016 +0100 |
| committer | David Howells <dhowells@redhat.com> | Wed Apr 06 16:14:24 2016 +0100 |
| tree | acb936239ac766592c557295aec265ec9a2d04fb | |
| parent | e68503bd6836ba765dc8e0ee77ea675fedc07e41 [diff] |
PKCS#7: Make trust determination dependent on contents of trust keyring Make the determination of the trustworthiness of a key dependent on whether a key that can verify it is present in the supplied ring of trusted keys rather than whether or not the verifying key has KEY_FLAG_TRUSTED set. verify_pkcs7_signature() will return -ENOKEY if the PKCS#7 message trust chain cannot be verified. Signed-off-by: David Howells <dhowells@redhat.com>