summaryrefslogtreecommitdiffstats
path: root/include/crypto/pkcs7.h
diff options
context:
space:
mode:
authorDavid Howells <dhowells@redhat.com>2014-07-01 17:40:20 +0200
committerDavid Howells <dhowells@redhat.com>2014-07-08 14:50:15 +0200
commit08815b62d700e4fbeb72a01986ad051c3dd84a15 (patch)
tree9a3df820a9716348fa947986d2310d50e14f9964 /include/crypto/pkcs7.h
parentPKCS#7: Verify internal certificate chain (diff)
downloadlinux-08815b62d700e4fbeb72a01986ad051c3dd84a15.tar.xz
linux-08815b62d700e4fbeb72a01986ad051c3dd84a15.zip
PKCS#7: Find intersection between PKCS#7 message and known, trusted keys
Find the intersection between the X.509 certificate chain contained in a PKCS#7 message and a set of keys that we already know and trust. Signed-off-by: David Howells <dhowells@redhat.com> Acked-by: Vivek Goyal <vgoyal@redhat.com> Reviewed-by: Kees Cook <keescook@chromium.org>
Diffstat (limited to 'include/crypto/pkcs7.h')
-rw-r--r--include/crypto/pkcs7.h8
1 files changed, 8 insertions, 0 deletions
diff --git a/include/crypto/pkcs7.h b/include/crypto/pkcs7.h
index 8ba0f3810d67..691c79172a26 100644
--- a/include/crypto/pkcs7.h
+++ b/include/crypto/pkcs7.h
@@ -9,6 +9,7 @@
* 2 of the Licence, or (at your option) any later version.
*/
+struct key;
struct pkcs7_message;
/*
@@ -23,6 +24,13 @@ extern int pkcs7_get_content_data(const struct pkcs7_message *pkcs7,
bool want_wrapper);
/*
+ * pkcs7_trust.c
+ */
+extern int pkcs7_validate_trust(struct pkcs7_message *pkcs7,
+ struct key *trust_keyring,
+ bool *_trusted);
+
+/*
* pkcs7_verify.c
*/
extern int pkcs7_verify(struct pkcs7_message *pkcs7);