Messages in this thread | | | Subject | Re: [PATCH 3/4] module: search the key only by keyid | From | Mimi Zohar <> | Date | Mon, 06 Oct 2014 15:39:48 -0400 |
| |
On Mon, 2014-10-06 at 23:44 +1100, James Morris wrote: > On Fri, 3 Oct 2014, David Howells wrote: > > > Dmitry Kasatkin <d.kasatkin@samsung.com> wrote: > > > > > BTW. But actually why signer is needed to find the key? > > > Every key has unique fingerprint. > > > > The SKID is by no means guaranteed unique, is not mandatory and has no defined > > algorithm for generating it. > > > > > Or you say that different certificates might have the same PK? > > > What I would consider strange. But anyway, if PK is the same, then > > > verification succeed. > > > > Do note: We *do* need to get away from using SKIDs. We have situations where > > we have to use a key that doesn't have one. > > > > David, I need to push to Linus for 3.17 -- please finalize the fix for > this and send me a pull request.
Thanks Dmitry, David. Everything now seems to be working properly with the patchset David posted today.
Mimi
| |