3 Commits

Author	SHA1	Message	Date
David Howells	e68503bd68	KEYS: Generalise system_verify_data() to provide access to internal content ... Generalise system_verify_data() to provide access to internal content through a callback. This allows all the PKCS#7 stuff to be hidden inside this function and removed from the PE file parser and the PKCS#7 test key. If external content is not required, NULL should be passed as data to the function. If the callback is not required, that can be set to NULL. The function is now called verify_pkcs7_signature() to contrast with verify_pefile_signature() and the definitions of both have been moved into linux/verification.h along with the key_being_used_for enum. Signed-off-by: David Howells <dhowells@redhat.com>	2016-04-06 16:14:24 +01:00
David Howells	5d2787cf0b	KEYS: Add an alloc flag to convey the builtinness of a key ... Add KEY_ALLOC_BUILT_IN to convey that a key should have KEY_FLAG_BUILTIN set rather than setting it after the fact. Signed-off-by: David Howells <dhowells@redhat.com> Acked-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	2016-02-09 16:40:46 +00:00
David Howells	cfc411e7ff	Move certificate handling to its own directory ... Move certificate handling out of the kernel/ directory and into a certs/ directory to get all the weird stuff in one place and move the generated signing keys into this directory. Signed-off-by: David Howells <dhowells@redhat.com> Reviewed-by: David Woodhouse <David.Woodhouse@intel.com>	2015-08-14 16:06:13 +01:00