Dmitry Kasatkin ffb70f61ba KEYS: validate certificate trust only with selected key ...

Instead of allowing public keys, with certificates signed by any
key on the system trusted keyring, to be added to a trusted keyring,
this patch further restricts the certificates to those signed by a
particular key on the system keyring.

This patch defines a new kernel parameter 'ca_keys' to identify the
specific key which must be used for trust validation of certificates.

Simplified Mimi's "KEYS: define an owner trusted keyring" patch.

Changelog:
- support for builtin x509 public keys only
- export "asymmetric_keyid_match"
- remove ifndefs MODULE
- rename kernel boot parameter from keys_ownerid to ca_keys

Signed-off-by: Dmitry Kasatkin <d.kasatkin@samsung.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>

2014-07-17 09:35:16 -04:00

..

.gitignore

X.509: Add a crypto key parser for binary (DER) X.509 certificates

2012-10-08 13:50:22 +10:30

asymmetric_keys.h

KEYS: make partial key id matching as a dedicated function

2014-07-17 09:35:16 -04:00

asymmetric_type.c

KEYS: validate certificate trust only with selected key

2014-07-17 09:35:16 -04:00

Kconfig

KEYS: The RSA public key algorithm needs to select MPILIB

2013-11-01 15:24:51 +00:00

Makefile

X.509: Add a crypto key parser for binary (DER) X.509 certificates

2012-10-08 13:50:22 +10:30

public_key.c

keys: change asymmetric keys to use common hash definitions

2013-10-25 17:15:18 -04:00

public_key.h

KEYS: Split public_key_verify_signature() and make available

2013-09-25 17:17:00 +01:00

rsa.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

2013-11-23 16:18:25 -08:00

signature.c

KEYS: Provide signature verification with an asymmetric key

2012-10-08 13:50:15 +10:30

x509_cert_parser.c

keys: change asymmetric keys to use common hash definitions

2013-10-25 17:15:18 -04:00

x509_parser.h

ima: provide support for arbitrary hash algorithms

2013-10-25 17:16:58 -04:00

x509_public_key.c

KEYS: validate certificate trust only with selected key

2014-07-17 09:35:16 -04:00

x509_rsakey.asn1

X.509: Add a crypto key parser for binary (DER) X.509 certificates

2012-10-08 13:50:22 +10:30

x509.asn1

X.509: Add a crypto key parser for binary (DER) X.509 certificates

2012-10-08 13:50:22 +10:30