tree bb1fb5d8a2f4165b015201d7803cc530368cced4
parent 0cad19190c8a25efc9dd796cedd2849b8c667285
author AKASHI Takahiro <takahiro.akashi@linaro.org> 1595327721 +0900
committer Heinrich Schuchardt <xypron.glpk@gmx.de> 1595414237 +0200

lib: crypto: export and enhance pkcs7_verify_one()

The function, pkcs7_verify_one(), will be utilized to rework signature
verification logic aiming to support intermediate certificates in
"chain of trust."

To do that, its function interface is expanded, adding an extra argument
which is expected to return the last certificate in trusted chain.
Then, this last one must further be verified with signature database, db
and/or dbx.

Signed-off-by: AKASHI Takahiro <takahiro.akashi@linaro.org>