lkml.org 
[lkml]   [2014]   [Oct]   [3]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    SubjectRe: [PATCH 3/4] module: search the key only by keyid
    Date
    Dmitry Kasatkin <d.kasatkin@samsung.com> wrote:

    > BTW. But actually why signer is needed to find the key?
    > Every key has unique fingerprint.

    The SKID is by no means guaranteed unique, is not mandatory and has no defined
    algorithm for generating it.

    > Or you say that different certificates might have the same PK?
    > What I would consider strange. But anyway, if PK is the same, then
    > verification succeed.

    Do note: We *do* need to get away from using SKIDs. We have situations where
    we have to use a key that doesn't have one.

    David


    \
     
     \ /
      Last update: 2014-10-03 16:21    [W:2.330 / U:0.636 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site