tree 4f2828a7114313c70eec4cef99f893dbe67c762b
parent af34cb0c3d16b46d88b661692b885d1d998a8ecb
author Mimi Zohar <zohar@linux.vnet.ibm.com> 1377023787 -0400
committer David Howells <dhowells@redhat.com> 1380125821 +0100

KEYS: verify a certificate is signed by a 'trusted' key

Only public keys, with certificates signed by an existing
'trusted' key on the system trusted keyring, should be added
to a trusted keyring.  This patch adds support for verifying
a certificate's signature.

This is derived from David Howells pkcs7_request_asymmetric_key() patch.

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Signed-off-by: David Howells <dhowells@redhat.com>