tmp_suning_uos_patched/crypto/asymmetric_keys
Dmitry Kasatkin 32c4741cb6 KEYS: validate certificate trust only with builtin keys
Instead of allowing public keys, with certificates signed by any
key on the system trusted keyring, to be added to a trusted keyring,
this patch further restricts the certificates to those signed only by
builtin keys on the system keyring.

This patch defines a new option 'builtin' for the kernel parameter
'keys_ownerid' to allow trust validation using builtin keys.

Simplified Mimi's "KEYS: define an owner trusted keyring" patch

Changelog v7:
- rename builtin_keys to use_builtin_keys

Signed-off-by: Dmitry Kasatkin <d.kasatkin@samsung.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
2014-07-17 09:35:17 -04:00
..
.gitignore
asymmetric_keys.h KEYS: make partial key id matching as a dedicated function 2014-07-17 09:35:16 -04:00
asymmetric_type.c KEYS: validate certificate trust only with selected key 2014-07-17 09:35:16 -04:00
Kconfig
Makefile
public_key.c
public_key.h
rsa.c
signature.c
x509_cert_parser.c
x509_parser.h
x509_public_key.c KEYS: validate certificate trust only with builtin keys 2014-07-17 09:35:17 -04:00
x509_rsakey.asn1
x509.asn1