mirror of
https://github.com/ibm-s390-linux/s390-tools.git
synced 2026-08-05 02:14:52 +00:00
When registering a zkey client at the EKMFWeb server, validate the certificate if it's public key matches with the identity key of the zkey client. Only allow registration when the certificate matches. This helps to prevent users from erroneously registering a wrong or outdated certificate for a zkey client. Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com> Reviewed-by: Finn Callies <fcallies@linux.ibm.com> Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>