summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDavid Howells <dhowells@redhat.com>2014-07-01 16:02:52 +0100
committerDavid Howells <dhowells@redhat.com>2014-07-09 14:58:47 +0100
commit98801c002f7e573b4a86bcd5b234864d375e98a0 (patch)
tree437b01b65391973de1c57d6d8753b3fee6f7c68e
parentaf316fc442ef23901bbfcec5af55e69ca6ce9563 (diff)
pefile: Validate PKCS#7 trust chain
Validate the PKCS#7 trust chain against the contents of the system keyring. Signed-off-by: David Howells <dhowells@redhat.com> Acked-by: Vivek Goyal <vgoyal@redhat.com>
-rw-r--r--crypto/asymmetric_keys/verify_pefile.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/crypto/asymmetric_keys/verify_pefile.c b/crypto/asymmetric_keys/verify_pefile.c
index 029a36510e80..79175e6ea0b2 100644
--- a/crypto/asymmetric_keys/verify_pefile.c
+++ b/crypto/asymmetric_keys/verify_pefile.c
@@ -449,7 +449,7 @@ int verify_pefile_signature(const void *pebuf, unsigned pelen,
if (ret < 0)
goto error;
- ret = -ENOANO; // Not yet complete
+ ret = pkcs7_validate_trust(pkcs7, trusted_keyring, _trusted);
error:
pkcs7_free_message(ctx.pkcs7);