Marc Hartmayer d14e7593cc genprotimg: support Armonk in IBM signing key subject ...

New IBM signing certificates will have 'Armonk' as locality in the
subject. Make sure that certificate revocations lists (CRL) with
'Poughkeepsie' as issuer locality are still considered as valid as long
as they are signed with the IBM signing keys private key. In addition,
drop the check for 'issuer(HKD) == subject(HKSK)' as it doesn't improve
security. While at it, remove now unused functions and fix a memory leak
of @akid in `check_crl_issuer`.

Reviewed-by: Christoph Schlameuss <schlameuss@linux.ibm.com>
Signed-off-by: Marc Hartmayer <mhartmay@linux.ibm.com>
Signed-off-by: Steffen Eiden <seiden@linux.ibm.com>

2024-03-22 12:07:29 +01:00

..

pv_crypto_def.h

genprotimg: support Armonk in IBM signing key subject

2024-03-22 12:07:29 +01:00

pv_hdr_def.h

genprotimg: add support for add-secret requests

2023-08-02 14:48:12 +02:00