X.509: Retain the key verification data

Browse source

Retain the key verification data (ie. the struct public_key_signature)
including the digest and the key identifiers.

Note that this means that we need to take a separate copy of the digest in
x509_get_sig_params() rather than lumping it in with the crypto layer data.

Signed-off-by: David Howells <dhowells@redhat.com>

...

This commit is contained in:

David Howells 2016-04-06 16:13:33 +01:00

parent a022ec0269

commit 77d0910d15

5 changed files with 67 additions and 66 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

8

crypto/asymmetric_keys/pkcs7_trust.c

View file

20

crypto/asymmetric_keys/pkcs7_verify.c

View file

40

crypto/asymmetric_keys/x509_cert_parser.c

View file

4

crypto/asymmetric_keys/x509_parser.h

View file

61

crypto/asymmetric_keys/x509_public_key.c

View file