tree 3c3d8c2db36424117fca5561d27b170fd83e44bf
parent 6c2dc5ae4ab719a61d19e8cef082226410b04ff8
author David Howells <dhowells@redhat.com> 1459955614 +0100
committer David Howells <dhowells@redhat.com> 1459955614 +0100

X.509: Fix self-signed determination

There's a bug in the code determining whether a certificate is self-signed
or not: if they have neither AKID nor SKID then we just assume that the
cert is self-signed, which may not be true.

Fix this by checking that the raw subject name matches the raw issuer name
and that the public key algorithm for the key and signature are both the
same in addition to requiring that the AKID bits match.

Signed-off-by: David Howells <dhowells@redhat.com>