mirror of
https://github.com/ibm-s390-linux/s390-tools.git
synced 2026-08-05 02:14:52 +00:00
New IBM signing keys will have Armonk as locality in the subject. Ensure that CRLs with Poughkeepsie as issuer locality are still discovered if they are signed with the signing keys private key. Also, drop the check for issuer/subject comparison and only rely on validity period and cryptographic signatures. Reviewed-by: Marc Hartmayer <mhartmay@linux.ibm.com> Reviewed-by: Christoph Schlameuss <schlameuss@linux.ibm.com> Signed-off-by: Steffen Eiden <seiden@linux.ibm.com>