| commit | 8c76d79393ccc9b89d9af402d79a49a9cd43c5aa | [log] [tgz] |
|---|---|---|
| author | David Howells <dhowells@redhat.com> | Tue Jul 01 16:40:19 2014 +0100 |
| committer | David Howells <dhowells@redhat.com> | Tue Jul 08 13:50:11 2014 +0100 |
| tree | 482d70a25d548d0a82d08ac0bb9e2749b388d633 | |
| parent | a4730357ee724f8c64f0292541ba3da8a95510fb [diff] |
PKCS#7: Verify internal certificate chain Verify certificate chain in the X.509 certificates contained within the PKCS#7 message as far as possible. If any signature that we should be able to verify fails, we reject the whole lot. Signed-off-by: David Howells <dhowells@redhat.com> Acked-by: Vivek Goyal <vgoyal@redhat.com> Reviewed-by: Kees Cook <keescook@chromium.org>