diff options
author | Eric Snowberg <eric.snowberg@oracle.com> | 2023-03-02 11:46:49 -0500 |
---|---|---|
committer | Jarkko Sakkinen <jarkko@kernel.org> | 2023-04-24 16:15:53 +0300 |
commit | 30eae2b037af54b24109dcaea21db46f6285c69b (patch) | |
tree | 0a637a2bbeb78b4d2c106fce957c276c2dab6a8e /usr/gen_initramfs.sh | |
parent | ef97e774713fcd34c45f7a7426c7d8845394f7be (diff) | |
download | linux-30eae2b037af54b24109dcaea21db46f6285c69b.tar.gz linux-30eae2b037af54b24109dcaea21db46f6285c69b.tar.bz2 linux-30eae2b037af54b24109dcaea21db46f6285c69b.zip |
KEYS: X.509: Parse Basic Constraints for CA
Parse the X.509 Basic Constraints. The basic constraints extension
identifies whether the subject of the certificate is a CA.
BasicConstraints ::= SEQUENCE {
cA BOOLEAN DEFAULT FALSE,
pathLenConstraint INTEGER (0..MAX) OPTIONAL }
If the CA is true, store it in the public_key. This will be used
in a follow on patch that requires knowing if the public key is a CA.
Link: https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.9
Signed-off-by: Eric Snowberg <eric.snowberg@oracle.com>
Reviewed-by: Mimi Zohar <zohar@linux.ibm.com>
Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org>
Tested-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org>
Diffstat (limited to 'usr/gen_initramfs.sh')
0 files changed, 0 insertions, 0 deletions