Messages in this thread | | | From | David Howells <> | Subject | Re: [PATCH 3/4] module: search the key only by keyid | Date | Fri, 03 Oct 2014 14:40:05 +0100 |
| |
Dmitry Kasatkin <d.kasatkin@samsung.com> wrote:
> BTW. But actually why signer is needed to find the key? > Every key has unique fingerprint.
The SKID is by no means guaranteed unique, is not mandatory and has no defined algorithm for generating it.
> Or you say that different certificates might have the same PK? > What I would consider strange. But anyway, if PK is the same, then > verification succeed.
Do note: We *do* need to get away from using SKIDs. We have situations where we have to use a key that doesn't have one.
David
| |