diff options
author | David Howells <dhowells@redhat.com> | 2015-07-20 23:16:31 +0300 |
---|---|---|
committer | David Howells <dhowells@redhat.com> | 2015-08-12 19:01:00 +0300 |
commit | 2c7fd3675ef1867d0d0c39e9f0bb5ddb67bfc7a7 (patch) | |
tree | f76418aad41317e825944e4ca96657f489b13cb2 /virt/kvm | |
parent | 99d27b1b52bd5cdf9bd9f7661ca8641e9a1b55e6 (diff) | |
download | linux-2c7fd3675ef1867d0d0c39e9f0bb5ddb67bfc7a7.tar.xz |
PKCS#7: Check content type and versions
We only support PKCS#7 signed-data [RFC2315 sec 9] content at the top level,
so reject anything else. Further, check that the version numbers in
SignedData and SignerInfo are 1 in both cases.
Note that we don't restrict the inner content type. In the PKCS#7 code we
don't parse the data attached there, but merely verify the signature over
it.
Signed-off-by: David Howells <dhowells@redhat.com>
Reviewed-By: David Woodhouse <David.Woodhouse@intel.com>
Diffstat (limited to 'virt/kvm')
0 files changed, 0 insertions, 0 deletions