CryptoPkg/BaseCryptLib: Add new API VerifyEKUsInPkcs7Signature

REF:https://bugzilla.tianocore.org/show_bug.cgi?id=1402

Add the API VerifyEKUsInPkcs7Signature to check if x509 cert
has any or all EKUs.

Signed-off-by: Zhichao Gao <zhichao.gao@intel.com>
Cc: Ting Ye <ting.ye@intel.com>
Cc: Gang Wei <gang.wei@intel.com>
Cc: Wang Jian J <jian.j.wang@intel.com>
Cc: Liming Gao <liming.gao@intel.com>
Cc: Sean Brogan <sean.brogan@microsoft.com>
Cc: Michael Turner <Michael.Turner@microsoft.com>
Cc: Bret Barkelew <Bret.Barkelew@microsoft.com>
Reviewed-by: Jian J Wang <jian.j.wang@intel.com>

1 files changed, 3 insertions, 1 deletions

diff --git a/CryptoPkg/Library/BaseCryptLib/PeiCryptLib.inf b/CryptoPkg/Library/BaseCryptLib/PeiCryptLib.inf
index e701c3d2f8..071f8dd0b2 100644
--- a/CryptoPkg/Library/BaseCryptLib/PeiCryptLib.inf
+++ b/CryptoPkg/Library/BaseCryptLib/PeiCryptLib.inf
@@ -13,8 +13,9 @@
 #  PEM handler functions, and pseudorandom number generator functions are not

 #  supported in this instance.

 #

-#  Copyright (c) 2010 - 2018, Intel Corporation. All rights reserved.<BR>

+#  Copyright (c) 2010 - 2019, Intel Corporation. All rights reserved.<BR>

 #  SPDX-License-Identifier: BSD-2-Clause-Patent

+

 #

 ##

 

@@ -52,6 +53,7 @@
   Pk/CryptPkcs7SignNull.c

   Pk/CryptPkcs7VerifyCommon.c

   Pk/CryptPkcs7VerifyBase.c

+  Pk/CryptPkcs7VerifyEku.c

 

   Pk/CryptDhNull.c

   Pk/CryptX509Null.c