KEYS: Split public_key_verify_signature() and make available

Modify public_key_verify_signature() so that it now takes a public_key struct
rather than a key struct and supply a wrapper that takes a key struct.  The
wrapper is then used by the asymmetric key subtype and the modified function is
used by X.509 self-signature checking and can be used by other things also.

Signed-off-by: David Howells <dhowells@redhat.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Reviewed-by: Josh Boyer <jwboyer@redhat.com>
This commit is contained in:
David Howells
2013-08-30 16:15:30 +01:00
parent 67f7d60b3a
commit 3d167d68e3
3 changed files with 39 additions and 9 deletions

View File

@@ -76,7 +76,7 @@ static int x509_check_signature(const struct public_key *pub,
if (ret < 0)
goto error_mpi;
ret = pub->algo->verify_signature(pub, sig);
ret = public_key_verify_signature(pub, sig);
pr_debug("Cert Verification: %d\n", ret);