tree acb936239ac766592c557295aec265ec9a2d04fb
parent e68503bd6836ba765dc8e0ee77ea675fedc07e41
author David Howells <dhowells@redhat.com> 1459955664 +0100
committer David Howells <dhowells@redhat.com> 1459955664 +0100

PKCS#7: Make trust determination dependent on contents of trust keyring

Make the determination of the trustworthiness of a key dependent on whether
a key that can verify it is present in the supplied ring of trusted keys
rather than whether or not the verifying key has KEY_FLAG_TRUSTED set.

verify_pkcs7_signature() will return -ENOKEY if the PKCS#7 message trust
chain cannot be verified.

Signed-off-by: David Howells <dhowells@redhat.com>