Re: [PATCH] pkcs7: fix check for self-signed certificate

2017-11-27 Thread James Morris
On Sun, 26 Nov 2017, Eric Biggers wrote: > From: Eric Biggers > > pkcs7_validate_trust_one() used 'x509->next == x509' to identify a > self-signed certificate. That's wrong; ->next is simply the link in the > linked list of certificates in the PKCS#7 message. It should be > checking ->signer i

[PATCH] pkcs7: fix check for self-signed certificate

2017-11-26 Thread Eric Biggers
From: Eric Biggers pkcs7_validate_trust_one() used 'x509->next == x509' to identify a self-signed certificate. That's wrong; ->next is simply the link in the linked list of certificates in the PKCS#7 message. It should be checking ->signer instead. Fix it. Fortunately this didn't actually mat