crypto/asymmetric_keys/restrict.c

57  * @payload: The payload of the new key.
58  * @trust_keyring: A ring of keys that can be used to vouch for the new cert.
60  * Check the new certificate against the ones in the trust keyring.  If one of
61  * those is the signing key and validates the new certificate, then mark the
62  * new certificate as being trusted.
64  * Returns 0 if the new certificate was accepted, -ENOKEY if we couldn't find a
119  * @payload: The payload of the new key.
122  * Check if the new certificate is a CA. If it is a CA, then mark the new
125  * Returns 0 if the new certificate was accepted, -ENOKEY if the
159  * @payload: The payload of the new key.
160  * @trust_keyring: A ring of keys that can be used to vouch for the new cert.
162  * Check if the new certificate has digitalSignature usage set. If it is,
163  * then mark the new certificate as being ok to link. Afterwards verify
164  * the new certificate against the ones in the trust_keyring.
166  * Returns 0 if the new certificate was accepted, -ENOKEY if the
315  * @payload: The payload of the new key.
316  * @trusted: A key or ring of keys that can be used to vouch for the new cert.
318  * Check the new certificate only against the key or keys passed in the data
319  * parameter. If one of those is the signing key and validates the new
320  * certificate, then mark the new certificate as being ok to link.
322  * Returns 0 if the new certificate was accepted, -ENOKEY if we
342  * @payload: The payload of the new key.
343  * @trusted: A key or ring of keys that can be used to vouch for the new cert.
345  * Check the new certificate against the key or keys passed in the data
347  * one of those is the signing key and validates the new certificate, then mark
348  * the new certificate as being ok to link.
350  * Returns 0 if the new certificate was accepted, -ENOKEY if we