aboutsummaryrefslogtreecommitdiffstats
path: root/scripts/extract-cert.c
diff options
context:
space:
mode:
authorDavid Howells <[email protected]>2015-07-20 20:16:31 +0000
committerDavid Howells <[email protected]>2015-08-12 16:01:00 +0000
commit2c7fd3675ef1867d0d0c39e9f0bb5ddb67bfc7a7 (patch)
treef76418aad41317e825944e4ca96657f489b13cb2 /scripts/extract-cert.c
parentmodsign: Add explicit CONFIG_SYSTEM_TRUSTED_KEYS option (diff)
downloadkernel-2c7fd3675ef1867d0d0c39e9f0bb5ddb67bfc7a7.tar.gz
kernel-2c7fd3675ef1867d0d0c39e9f0bb5ddb67bfc7a7.zip
PKCS#7: Check content type and versions
We only support PKCS#7 signed-data [RFC2315 sec 9] content at the top level, so reject anything else. Further, check that the version numbers in SignedData and SignerInfo are 1 in both cases. Note that we don't restrict the inner content type. In the PKCS#7 code we don't parse the data attached there, but merely verify the signature over it. Signed-off-by: David Howells <[email protected]> Reviewed-By: David Woodhouse <[email protected]>
Diffstat (limited to 'scripts/extract-cert.c')
0 files changed, 0 insertions, 0 deletions