Re: [PATCH 06/13] efi_loader: image_loader: verification for all signatures should pass

2020-06-01 Thread AKASHI Takahiro
Heinrich, On Sat, May 30, 2020 at 09:01:53AM +0200, Heinrich Schuchardt wrote: > On 5/29/20 8:41 AM, AKASHI Takahiro wrote: > > A signed image may have multiple signatures in > > - each WIN_CERTIFICATE in authenticode, and/or > > - each SignerInfo in pkcs7 SignedData (of WIN_CERTIFICATE) > > >

Re: [PATCH 06/13] efi_loader: image_loader: verification for all signatures should pass

2020-05-30 Thread Heinrich Schuchardt
On 5/29/20 8:41 AM, AKASHI Takahiro wrote: > A signed image may have multiple signatures in > - each WIN_CERTIFICATE in authenticode, and/or > - each SignerInfo in pkcs7 SignedData (of WIN_CERTIFICATE) > > In the initial implementation of efi_image_authenticate(), the criteria > of verification

[PATCH 06/13] efi_loader: image_loader: verification for all signatures should pass

2020-05-28 Thread AKASHI Takahiro
A signed image may have multiple signatures in - each WIN_CERTIFICATE in authenticode, and/or - each SignerInfo in pkcs7 SignedData (of WIN_CERTIFICATE) In the initial implementation of efi_image_authenticate(), the criteria of verification check for multiple signatures case is a bit ambiguous