diff options
| author | David Howells <[email protected]> | 2015-07-20 20:16:31 +0000 |
|---|---|---|
| committer | David Howells <[email protected]> | 2015-08-12 16:01:00 +0000 |
| commit | 2c7fd3675ef1867d0d0c39e9f0bb5ddb67bfc7a7 (patch) | |
| tree | f76418aad41317e825944e4ca96657f489b13cb2 /scripts/extract-cert.c | |
| parent | modsign: Add explicit CONFIG_SYSTEM_TRUSTED_KEYS option (diff) | |
| download | kernel-2c7fd3675ef1867d0d0c39e9f0bb5ddb67bfc7a7.tar.gz kernel-2c7fd3675ef1867d0d0c39e9f0bb5ddb67bfc7a7.zip | |
PKCS#7: Check content type and versions
We only support PKCS#7 signed-data [RFC2315 sec 9] content at the top level,
so reject anything else. Further, check that the version numbers in
SignedData and SignerInfo are 1 in both cases.
Note that we don't restrict the inner content type. In the PKCS#7 code we
don't parse the data attached there, but merely verify the signature over
it.
Signed-off-by: David Howells <[email protected]>
Reviewed-By: David Woodhouse <[email protected]>
Diffstat (limited to 'scripts/extract-cert.c')
0 files changed, 0 insertions, 0 deletions
