Viktor Mihajlovski 673ff375d9 genprotimg/check_hostkeydoc: relax default issuer check ...

While the original default issuer's organizationalUnitName (OU)
was defined as "IBM Z Host Key Signing Service", any OU ending
with "Key Signing Service" is considered legal.

Let's relax the default issuer check by stripping off characters
preceding "Key Signing Service".

Signed-off-by: Viktor Mihajlovski <mihajlov@linux.ibm.com>
Reviewed-by: Marc Hartmayer <mhartmay@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>

2022-04-06 16:11:19 +02:00

..

check_hostkeydoc

genprotimg/check_hostkeydoc: relax default issuer check

2022-04-06 16:11:19 +02:00