BMC/Intel-BMC/linux.git/crypto/asymmetric_keys/mscode_parser.c, branch devIntel OpenBMC Linux kernel source tree (mirror)https://git.radix-linux.su/BMC/Intel-BMC/linux.git/atom?h=dev2014-07-09T13:58:37+00:00pefile: Handle pesign using the wrong OID2014-07-09T13:58:37+00:00Vivek Goyalvgoyal@redhat.com2014-07-08T17:10:46+00:00urn:sha1:dd7d66f21b9eb6a3979d8c9ba910eba772cfbbc9
The pesign utility had a bug where it was using OID_msIndividualSPKeyPurpose
instead of OID_msPeImageDataObjId - so allow both OIDs.
Signed-off-by: Vivek Goyal <vgoyal@redhat.com>
Acked-by: Vivek Goyal <vgoyal@redhat.com>
pefile: Parse the "Microsoft individual code signing" data blob2014-07-09T13:58:37+00:00David Howellsdhowells@redhat.com2014-07-01T15:02:52+00:00urn:sha1:4c0b4b1d1ae0cbc86f150e2905a1c3d2a17b7c1e
The PKCS#7 certificate should contain a "Microsoft individual code signing"
data blob as its signed content. This blob contains a digest of the signed
content of the PE binary and the OID of the digest algorithm used (typically
SHA256).
Signed-off-by: David Howells <dhowells@redhat.com>
Acked-by: Vivek Goyal <vgoyal@redhat.com>
Reviewed-by: Kees Cook <keescook@chromium.org>