commit | 09dacbbda935895a4898e517e1248c11ca493216 | [log] [tgz] |
---|---|---|
author | David Howells <dhowells@redhat.com> | Tue Jul 01 16:02:51 2014 +0100 |
committer | David Howells <dhowells@redhat.com> | Wed Jul 09 14:58:37 2014 +0100 |
tree | 0860458e753285731c8f9752a95b2cbe53684c67 | |
parent | 26d1164be37f1145a96af15f294122876d8e5c77 [diff] |
pefile: Strip the wrapper off of the cert data block The certificate data block in a PE binary has a wrapper around the PKCS#7 signature we actually want to get at. Strip this off and check that we've got something that appears to be a PKCS#7 signature. Signed-off-by: David Howells <dhowells@redhat.com> Acked-by: Vivek Goyal <vgoyal@redhat.com> Reviewed-by: Kees Cook <keescook@chromium.org>