diff options
| author | David Howells <dhowells@redhat.com> | 2014-07-01 16:02:52 +0100 |
|---|---|---|
| committer | David Howells <dhowells@redhat.com> | 2014-07-09 14:58:47 +0100 |
| commit | 6390c2d3013e6f493ee0163c5abd26fcd422c4df (patch) | |
| tree | 3e4d1e7b93d55230e44f4069821f9b8b22e05742 /crypto/asymmetric_keys/verify_pefile.c | |
| parent | 708952ea0d6e18299f760f95aebc20bed4822846 (diff) | |
| download | linux-crypto-6390c2d3013e6f493ee0163c5abd26fcd422c4df.tar.gz linux-crypto-6390c2d3013e6f493ee0163c5abd26fcd422c4df.zip | |
pefile: Validate PKCS#7 trust chain
Validate the PKCS#7 trust chain against the contents of the system keyring.
Signed-off-by: David Howells <dhowells@redhat.com>
Acked-by: Vivek Goyal <vgoyal@redhat.com>
Diffstat (limited to 'crypto/asymmetric_keys/verify_pefile.c')
| -rw-r--r-- | crypto/asymmetric_keys/verify_pefile.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/crypto/asymmetric_keys/verify_pefile.c b/crypto/asymmetric_keys/verify_pefile.c index 029a3651..79175e6e 100644 --- a/crypto/asymmetric_keys/verify_pefile.c +++ b/crypto/asymmetric_keys/verify_pefile.c @@ -449,7 +449,7 @@ int verify_pefile_signature(const void *pebuf, unsigned pelen, if (ret < 0) goto error; - ret = -ENOANO; // Not yet complete + ret = pkcs7_validate_trust(pkcs7, trusted_keyring, _trusted); error: pkcs7_free_message(ctx.pkcs7); |