Mimi Zohar 3be4beaf7c KEYS: verify a certificate is signed by a 'trusted' key ... Only public keys, with certificates signed by an existing 'trusted' key on the system trusted keyring, should be added to a trusted keyring. This patch adds support for verifying a certificate's signature. This is derived from David Howells pkcs7_request_asymmetric_key() patch. Changelog v6: - on error free key - Dmitry - validate trust only for not already trusted keys - Dmitry - formatting cleanup Changelog: - define get_system_trusted_keyring() to fix kbuild issues Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com> Signed-off-by: David Howells <dhowells@redhat.com> Acked-by: Dmitry Kasatkin <dmitry.kasatkin@gmail.com>		2014-07-17 09:35:15 -04:00
..
.gitignore	X.509: Add a crypto key parser for binary (DER) X.509 certificates	2012-10-08 13:50:22 +10:30
asymmetric_keys.h	KEYS: Implement asymmetric key type	2012-10-08 13:50:12 +10:30
asymmetric_type.c	KEYS: Set the asymmetric-key type default search method	2013-09-25 17:17:01 +01:00
Kconfig	KEYS: The RSA public key algorithm needs to select MPILIB	2013-11-01 15:24:51 +00:00
Makefile	X.509: Add a crypto key parser for binary (DER) X.509 certificates	2012-10-08 13:50:22 +10:30
public_key.c	keys: change asymmetric keys to use common hash definitions	2013-10-25 17:15:18 -04:00
public_key.h	KEYS: Split public_key_verify_signature() and make available	2013-09-25 17:17:00 +01:00
rsa.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6	2013-11-23 16:18:25 -08:00
signature.c	KEYS: Provide signature verification with an asymmetric key	2012-10-08 13:50:15 +10:30
x509_cert_parser.c	keys: change asymmetric keys to use common hash definitions	2013-10-25 17:15:18 -04:00
x509_parser.h	ima: provide support for arbitrary hash algorithms	2013-10-25 17:16:58 -04:00
x509_public_key.c	KEYS: verify a certificate is signed by a 'trusted' key	2014-07-17 09:35:15 -04:00
x509_rsakey.asn1	X.509: Add a crypto key parser for binary (DER) X.509 certificates	2012-10-08 13:50:22 +10:30
x509.asn1	X.509: Add a crypto key parser for binary (DER) X.509 certificates	2012-10-08 13:50:22 +10:30