Viktor Mihajlovski 92a3b30323 genprotimg/check_hostkeydoc: allow to disable default issuer check ...

The default issuer check may fail if the to-be-verified host key
document was issued and signed by an entity not known at the point
in time check_hostkeydoc was released.

In order to allow verification of the chain of trust for an unknown
but otherwise valid issuer, check_hostkeydoc can be called with
the -d command line option.

This commit also enhances the help text by briefly describing the
command line options and fixes a typo.

Signed-off-by: Viktor Mihajlovski <mihajlov@linux.ibm.com>
Reviewed-by: Marc Hartmayer <mhartmay@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>

2022-04-06 16:11:19 +02:00

..

check_hostkeydoc

genprotimg/check_hostkeydoc: allow to disable default issuer check

2022-04-06 16:11:19 +02:00