tree ad9bf9a2fa35fa4dbb1a4402f1c3d6b092fc7f28
parent 41559420003cfe99522257dded7793192c77b4e9
author David Howells <dhowells@redhat.com> 1410885377 +0100
committer David Howells <dhowells@redhat.com> 1410885377 +0100

PKCS#7: Handle PKCS#7 messages that contain no X.509 certs

The X.509 certificate list in a PKCS#7 message is optional.  To save space, we
can omit the inclusion of any X.509 certificates if we are sure that we can
look the relevant public key up by the serial number and issuer given in a
signed info block.

This also supports use of a signed info block for which we can't find a
matching X.509 cert in the certificate list, though it be populated.

Signed-off-by: David Howells <dhowells@redhat.com>
Acked-by: Vivek Goyal <vgoyal@redhat.com>