| .. | .. | 
|---|
|  | 1 | +/* SPDX-License-Identifier: GPL-2.0-or-later */ | 
|---|
| 1 | 2 | /* Signature verification | 
|---|
| 2 | 3 | * | 
|---|
| 3 | 4 | * Copyright (C) 2014 Red Hat, Inc. All Rights Reserved. | 
|---|
| 4 | 5 | * Written by David Howells (dhowells@redhat.com) | 
|---|
| 5 |  | - * | 
|---|
| 6 |  | - * This program is free software; you can redistribute it and/or | 
|---|
| 7 |  | - * modify it under the terms of the GNU General Public Licence | 
|---|
| 8 |  | - * as published by the Free Software Foundation; either version | 
|---|
| 9 |  | - * 2 of the Licence, or (at your option) any later version. | 
|---|
| 10 | 6 | */ | 
|---|
| 11 | 7 |  | 
|---|
| 12 | 8 | #ifndef _LINUX_VERIFICATION_H | 
|---|
| .. | .. | 
|---|
| 17 | 13 | * should be used. | 
|---|
| 18 | 14 | */ | 
|---|
| 19 | 15 | #define VERIFY_USE_SECONDARY_KEYRING ((struct key *)1UL) | 
|---|
|  | 16 | +#define VERIFY_USE_PLATFORM_KEYRING  ((struct key *)2UL) | 
|---|
| 20 | 17 |  | 
|---|
| 21 | 18 | /* | 
|---|
| 22 | 19 | * The use to which an asymmetric key is being put. | 
|---|
| .. | .. | 
|---|
| 35 | 32 | #ifdef CONFIG_SYSTEM_DATA_VERIFICATION | 
|---|
| 36 | 33 |  | 
|---|
| 37 | 34 | struct key; | 
|---|
|  | 35 | +struct pkcs7_message; | 
|---|
| 38 | 36 |  | 
|---|
| 39 | 37 | extern int verify_pkcs7_signature(const void *data, size_t len, | 
|---|
| 40 | 38 | const void *raw_pkcs7, size_t pkcs7_len, | 
|---|
| .. | .. | 
|---|
| 44 | 42 | const void *data, size_t len, | 
|---|
| 45 | 43 | size_t asn1hdrlen), | 
|---|
| 46 | 44 | void *ctx); | 
|---|
|  | 45 | +extern int verify_pkcs7_message_sig(const void *data, size_t len, | 
|---|
|  | 46 | +				    struct pkcs7_message *pkcs7, | 
|---|
|  | 47 | +				    struct key *trusted_keys, | 
|---|
|  | 48 | +				    enum key_being_used_for usage, | 
|---|
|  | 49 | +				    int (*view_content)(void *ctx, | 
|---|
|  | 50 | +							const void *data, | 
|---|
|  | 51 | +							size_t len, | 
|---|
|  | 52 | +							size_t asn1hdrlen), | 
|---|
|  | 53 | +				    void *ctx); | 
|---|
| 47 | 54 |  | 
|---|
| 48 | 55 | #ifdef CONFIG_SIGNED_PE_FILE_VERIFICATION | 
|---|
| 49 | 56 | extern int verify_pefile_signature(const void *pebuf, unsigned pelen, | 
|---|