summaryrefslogtreecommitdiff
path: root/crypto/asymmetric_keys/x509_cert_parser.c
diff options
context:
space:
mode:
authorDavid Howells <dhowells@redhat.com>2015-07-20 21:16:31 +0100
committerDavid Howells <dhowells@redhat.com>2015-08-12 17:01:00 +0100
commitbb06af6c45ab7e6d321f1b7810f7832f678a5c8e (patch)
tree9c2f927ec307ec4b998873c6a27193158e75eb3f /crypto/asymmetric_keys/x509_cert_parser.c
parent5170d3851b296e7423fe077e0ca534f0eac41611 (diff)
downloadlinux-crypto-bb06af6c45ab7e6d321f1b7810f7832f678a5c8e.tar.gz
linux-crypto-bb06af6c45ab7e6d321f1b7810f7832f678a5c8e.zip
PKCS#7: Check content type and versions
We only support PKCS#7 signed-data [RFC2315 sec 9] content at the top level, so reject anything else. Further, check that the version numbers in SignedData and SignerInfo are 1 in both cases. Note that we don't restrict the inner content type. In the PKCS#7 code we don't parse the data attached there, but merely verify the signature over it. Signed-off-by: David Howells <dhowells@redhat.com> Reviewed-By: David Woodhouse <David.Woodhouse@intel.com>
Diffstat (limited to 'crypto/asymmetric_keys/x509_cert_parser.c')
0 files changed, 0 insertions, 0 deletions