Re: [PATCH 01/20] KEYS: verify a certificate is signed by a 'trusted' key

2014-04-24 Thread Mimi Zohar
On Thu, 2014-04-24 at 23:07 +0300, Dmitry Kasatkin wrote: > On 24 April 2014 19:53, Mimi Zohar wrote: > > On Wed, 2014-04-23 at 16:30 +0300, Dmitry Kasatkin wrote: > >> From: Mimi Zohar > >> > >> Only public keys, with certificates signed by an existing > >> 'trusted' key on the system trusted k

Re: [PATCH 01/20] KEYS: verify a certificate is signed by a 'trusted' key

2014-04-24 Thread Dmitry Kasatkin
On 24 April 2014 19:53, Mimi Zohar wrote: > On Wed, 2014-04-23 at 16:30 +0300, Dmitry Kasatkin wrote: >> From: Mimi Zohar >> >> Only public keys, with certificates signed by an existing >> 'trusted' key on the system trusted keyring, should be added >> to a trusted keyring. This patch adds suppo

Re: [PATCH 01/20] KEYS: verify a certificate is signed by a 'trusted' key

2014-04-24 Thread Mimi Zohar
On Wed, 2014-04-23 at 16:30 +0300, Dmitry Kasatkin wrote: > From: Mimi Zohar > > Only public keys, with certificates signed by an existing > 'trusted' key on the system trusted keyring, should be added > to a trusted keyring. This patch adds support for verifying > a certificate's signature. >

[PATCH 01/20] KEYS: verify a certificate is signed by a 'trusted' key

2014-04-23 Thread Dmitry Kasatkin
From: Mimi Zohar Only public keys, with certificates signed by an existing 'trusted' key on the system trusted keyring, should be added to a trusted keyring. This patch adds support for verifying a certificate's signature. This is derived from David Howells pkcs7_request_asymmetric_key() patch.