/linux-6.3-rc2/crypto/asymmetric_keys/ |
A D | x509_public_key.c | 36 sig->s = kmemdup(cert->raw_sig, cert->raw_sig_size, GFP_KERNEL); in x509_get_sig_params() 99 if (cert->raw_subject_size != cert->raw_issuer_size || in x509_check_for_self_signed() 100 memcmp(cert->raw_subject, cert->raw_issuer, in x509_check_for_self_signed() 104 if (cert->sig->auth_ids[0] || cert->sig->auth_ids[1]) { in x509_check_for_self_signed() 109 bool b = asymmetric_key_id_same(cert->id, cert->sig->auth_ids[0]); in x509_check_for_self_signed() 116 cert->sig->auth_ids[0] && cert->sig->auth_ids[1]) in x509_check_for_self_signed() 120 ret = public_key_verify_signature(cert->pub, cert->sig); in x509_check_for_self_signed() 154 if (IS_ERR(cert)) in x509_key_preparse() 169 cert->sig->pkey_algo, cert->sig->hash_algo); in x509_key_preparse() 221 cert->pub = NULL; in x509_key_preparse() [all …]
|
A D | x509_cert_parser.c | 46 if (cert) { in x509_free_certificate() 49 kfree(cert->issuer); in x509_free_certificate() 51 kfree(cert->id); in x509_free_certificate() 52 kfree(cert->skid); in x509_free_certificate() 53 kfree(cert); in x509_free_certificate() 70 if (!cert) in x509_cert_parse() 73 if (!cert->pub) in x509_cert_parse() 76 if (!cert->sig) in x509_cert_parse() 82 ctx->cert = cert; in x509_cert_parse() 130 cert->id = kid; in x509_cert_parse() [all …]
|
A D | x509_parser.h | 55 extern void x509_free_certificate(struct x509_certificate *cert); 64 extern int x509_get_sig_params(struct x509_certificate *cert); 65 extern int x509_check_for_self_signed(struct x509_certificate *cert);
|
A D | pkcs7_parser.c | 59 struct x509_certificate *cert; in pkcs7_free_message() local 64 cert = pkcs7->certs; in pkcs7_free_message() 65 pkcs7->certs = cert->next; in pkcs7_free_message() 66 x509_free_certificate(cert); in pkcs7_free_message() 69 cert = pkcs7->crl; in pkcs7_free_message() 70 pkcs7->crl = cert->next; in pkcs7_free_message() 71 x509_free_certificate(cert); in pkcs7_free_message() 157 struct x509_certificate *cert = ctx->certs; in pkcs7_parse_message() local 158 ctx->certs = cert->next; in pkcs7_parse_message() 159 x509_free_certificate(cert); in pkcs7_parse_message()
|
/linux-6.3-rc2/arch/s390/boot/ |
A D | ipl_report.c | 34 struct ipl_rb_certificate_entry *cert; in find_bootdata_space() local 45 for_each_rb_entry(cert, certs) in find_bootdata_space() 46 ipl_cert_list_size += sizeof(unsigned int) + cert->len; in find_bootdata_space() 65 for_each_rb_entry(cert, certs) in find_bootdata_space() 66 if (intersects(safe_addr, size, cert->addr, cert->len)) { in find_bootdata_space() 67 safe_addr = cert->addr + cert->len; in find_bootdata_space() 87 struct ipl_rb_certificate_entry *cert; in copy_certificates_bootdata() local 91 for_each_rb_entry(cert, certs) { in copy_certificates_bootdata() 92 *(unsigned int *) ptr = cert->len; in copy_certificates_bootdata() 94 memcpy(ptr, (void *) cert->addr, cert->len); in copy_certificates_bootdata() [all …]
|
/linux-6.3-rc2/certs/ |
A D | Makefile | 26 cmd_extract_certs = $(obj)/extract-cert "$(extract-cert-in)" $@ 27 extract-cert-in = $(filter-out $(obj)/extract-cert, $(real-prereqs)) 31 $(obj)/x509_certificate_list: $(CONFIG_SYSTEM_TRUSTED_KEYS) $(obj)/extract-cert FORCE 70 $(obj)/signing_key.x509: extract-cert-in := $(PKCS11_URI) 73 $(obj)/signing_key.x509: $(filter-out $(PKCS11_URI),$(CONFIG_MODULE_SIG_KEY)) $(obj)/extract-cert F… 80 $(obj)/x509_revocation_list: $(CONFIG_SYSTEM_REVOCATION_KEYS) $(obj)/extract-cert FORCE 85 hostprogs := extract-cert 87 HOSTCFLAGS_extract-cert.o = $(shell $(HOSTPKG_CONFIG) --cflags libcrypto 2> /dev/null) 88 HOSTLDLIBS_extract-cert = $(shell $(HOSTPKG_CONFIG) --libs libcrypto 2> /dev/null || echo -lcrypto)
|
A D | extract-cert.c | 128 X509 *cert; in main() member 132 parms.cert = NULL; in main() 145 ERR(!parms.cert, "Get X.509 from PKCS#11"); in main() 146 write_cert(parms.cert); in main()
|
A D | .gitignore | 3 /extract-cert
|
A D | Kconfig | 112 tools/certs/print-cert-tbs-hash.sh .
|
/linux-6.3-rc2/drivers/staging/greybus/Documentation/firmware/ |
A D | authenticate.c | 19 struct cap_ioc_get_ims_certificate cert = { variable 66 ret = ioctl(fd, CAP_IOC_GET_IMS_CERTIFICATE, &cert); in main() 73 printf("IMS Certificate size: %d\n", cert.cert_size); in main()
|
/linux-6.3-rc2/scripts/ |
A D | insert-sys-cert.c | 281 char *cert; in main() local 310 cert = read_file(cert_file, &cert_size); in main() 311 if (!cert) in main() 390 strncmp(cert_sym.content, cert, cert_size) == 0) { in main() 398 memcpy(cert_sym.content, cert, cert_size); in main()
|
A D | .gitignore | 4 /insert-sys-cert
|
A D | remove-stale-files | 27 rm -f scripts/extract-cert
|
A D | Makefile | 11 hostprogs-always-$(CONFIG_SYSTEM_EXTRA_CERTIFICATE) += insert-sys-cert
|
/linux-6.3-rc2/arch/s390/kernel/ |
A D | ipl.c | 2415 cert = vzalloc(sizeof(*cert)); in ipl_report_add_certificate() 2416 if (!cert) in ipl_report_add_certificate() 2420 cert->entry.addr = addr; in ipl_report_add_certificate() 2421 cert->entry.len = len; in ipl_report_add_certificate() 2422 cert->key = key; in ipl_report_add_certificate() 2425 report->size += cert->entry.len; in ipl_report_add_certificate() 2489 memcpy(ptr, &cert->entry, sizeof(cert->entry)); in ipl_report_finish() 2490 ptr += sizeof(cert->entry); in ipl_report_finish() 2496 memcpy(ptr, cert->key, cert->entry.len); in ipl_report_finish() 2497 ptr += cert->entry.len; in ipl_report_finish() [all …]
|
/linux-6.3-rc2/Documentation/crypto/ |
A D | asymmetric-keys.rst | 380 keyctl padd asymmetric "" $root_id < root1.cert 381 keyctl padd asymmetric "" $root_id < root2.cert 389 keyctl padd asymmetric "" $chain_id < intermediateA.cert 390 keyctl padd asymmetric "" $chain_id < intermediateB.cert 391 keyctl padd asymmetric "" $chain_id < end-entity.cert 402 keyctl padd asymmetric "" $chain2_id < root1.cert 404 # Restrict the keyring that already has root1.cert linked. The cert 410 keyctl padd asymmetric "" $chain2_id < intermediateA.cert 411 keyctl padd asymmetric "" $chain2_id < intermediateB.cert 412 keyctl padd asymmetric "" $chain2_id < end-entity.cert
|
/linux-6.3-rc2/arch/s390/include/asm/ |
A D | ipl.h | 139 unsigned char flags, unsigned short cert);
|
/linux-6.3-rc2/security/integrity/ima/ |
A D | Kconfig | 264 bool "Permit keys validly signed by a built-in or secondary CA cert (EXPERIMENTAL)" 272 key is validly signed by a CA cert in the system built-in or
|