David Howells ad3043fda3 X.509: Fix self-signed determination ... There's a bug in the code determining whether a certificate is self-signed or not: if they have neither AKID nor SKID then we just assume that the cert is self-signed, which may not be true. Fix this by checking that the raw subject name matches the raw issuer name and that the public key algorithm for the key and signature are both the same in addition to requiring that the AKID bits match. Signed-off-by: David Howells <dhowells@redhat.com>		2016-04-06 16:13:34 +01:00
..
.gitignore	X.509: Add a crypto key parser for binary (DER) X.509 certificates	2012-10-08 13:50:22 +10:30
asymmetric_keys.h	KEYS: Merge the type-specific data with the payload data	2015-10-21 15:18:36 +01:00
asymmetric_type.c	KEYS: Allow authentication data to be stored in an asymmetric key	2016-04-06 16:13:33 +01:00
Kconfig	akcipher: Move the RSA DER encoding check to the crypto layer	2016-03-03 21:49:27 +00:00
Makefile	akcipher: Move the RSA DER encoding check to the crypto layer	2016-03-03 21:49:27 +00:00
mscode.asn1	pefile: Parse the "Microsoft individual code signing" data blob	2014-07-09 14:58:37 +01:00
mscode_parser.c	X.509: Make algo identifiers text instead of enum	2016-03-03 21:49:27 +00:00
pkcs7.asn1	PKCS#7: Appropriately restrict authenticated attributes and content type	2015-08-12 17:01:01 +01:00
pkcs7_key_type.c	PKCS#7: Add MODULE_LICENSE() to test module	2015-08-13 02:51:33 +01:00
pkcs7_parser.c	PKCS#7: Make the signature a pointer rather than embedding it	2016-04-06 16:13:33 +01:00
pkcs7_parser.h	PKCS#7: Make the signature a pointer rather than embedding it	2016-04-06 16:13:33 +01:00
pkcs7_trust.c	PKCS#7: Make the signature a pointer rather than embedding it	2016-04-06 16:13:33 +01:00
pkcs7_verify.c	X.509: Extract signature digest and make self-signed cert checks earlier	2016-04-06 16:13:34 +01:00
public_key.c	KEYS: Allow authentication data to be stored in an asymmetric key	2016-04-06 16:13:33 +01:00
signature.c	KEYS: Add identifier pointers to public_key_signature struct	2016-04-06 16:13:33 +01:00
verify_pefile.c	X.509: Make algo identifiers text instead of enum	2016-03-03 21:49:27 +00:00
verify_pefile.h	X.509: Make algo identifiers text instead of enum	2016-03-03 21:49:27 +00:00
x509.asn1	X.509: Add bits needed for PKCS#7	2014-07-01 16:40:19 +01:00
x509_akid.asn1	X.509: Extract both parts of the AuthorityKeyIdentifier	2015-08-07 16:26:13 +01:00
x509_cert_parser.c	X.509: Extract signature digest and make self-signed cert checks earlier	2016-04-06 16:13:34 +01:00
x509_parser.h	X.509: Extract signature digest and make self-signed cert checks earlier	2016-04-06 16:13:34 +01:00
x509_public_key.c	X.509: Fix self-signed determination	2016-04-06 16:13:34 +01:00