Re: [PATCH v5 6/8] efi_loader: signature: rework for intermediate certificates support

2020-07-28 Thread AKASHI Takahiro
Heinrich, On Wed, Jul 22, 2020 at 01:00:30PM +0200, Heinrich Schuchardt wrote: > On 21.07.20 12:35, AKASHI Takahiro wrote: > > In this commit, efi_signature_verify(with_sigdb) will be re-implemented > > using pcks7_verify_one() in order to support certificates chain, where > > the signer's certifi

Re: [PATCH v5 6/8] efi_loader: signature: rework for intermediate certificates support

2020-07-22 Thread Heinrich Schuchardt
On 21.07.20 12:35, AKASHI Takahiro wrote: > In this commit, efi_signature_verify(with_sigdb) will be re-implemented > using pcks7_verify_one() in order to support certificates chain, where > the signer's certificate will be signed by an intermediate CA (certificate > authority) and the latter's cer

[PATCH v5 6/8] efi_loader: signature: rework for intermediate certificates support

2020-07-21 Thread AKASHI Takahiro
In this commit, efi_signature_verify(with_sigdb) will be re-implemented using pcks7_verify_one() in order to support certificates chain, where the signer's certificate will be signed by an intermediate CA (certificate authority) and the latter's certificate will also be signed by another CA and so