Commit 98801c00 authored by David Howells's avatar David Howells

pefile: Validate PKCS#7 trust chain

Validate the PKCS#7 trust chain against the contents of the system keyring.
Signed-off-by: default avatarDavid Howells <dhowells@redhat.com>
Acked-by: default avatarVivek Goyal <vgoyal@redhat.com>
parent af316fc4
...@@ -449,7 +449,7 @@ int verify_pefile_signature(const void *pebuf, unsigned pelen, ...@@ -449,7 +449,7 @@ int verify_pefile_signature(const void *pebuf, unsigned pelen,
if (ret < 0) if (ret < 0)
goto error; goto error;
ret = -ENOANO; // Not yet complete ret = pkcs7_validate_trust(pkcs7, trusted_keyring, _trusted);
error: error:
pkcs7_free_message(ctx.pkcs7); pkcs7_free_message(ctx.pkcs7);
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment