lib/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-12-14 02:22:15 +03:00
Code Activity

library: x509: replace mbedtls_pk_can_do() with mbedtls_pk_can_do_psa()

Browse Source 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
This commit is contained in:
Valerio Setti
2025-11-12 14:44:59 +01:00
parent 9d1fa1a8d8
commit 1de094fb32
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
library/x509_crt.c
View File

@@ -43,6 +43,8 @@
#include "mbedtls/threading.h" #include "mbedtls/threading.h"
#endif #endif
#include "mbedtls_utils.h"
#if defined(MBEDTLS_HAVE_TIME) #if defined(MBEDTLS_HAVE_TIME)
#if defined(_WIN32) && !defined(EFIX64) && !defined(EFI32) #if defined(_WIN32) && !defined(EFIX64) && !defined(EFI32)
#ifndef WIN32_LEAN_AND_MEAN #ifndef WIN32_LEAN_AND_MEAN
@@ -2109,7 +2111,9 @@ static int x509_crt_check_signature(const mbedtls_x509_crt *child,
psa_status_t status = PSA_ERROR_CORRUPTION_DETECTED; psa_status_t status = PSA_ERROR_CORRUPTION_DETECTED;
/* Skip expensive computation on obvious mismatch */ /* Skip expensive computation on obvious mismatch */
if (!mbedtls_pk_can_do(&parent->pk, (mbedtls_pk_type_t) child->sig_pk)) { if (!mbedtls_pk_can_do_psa(&parent->pk,
mbedtls_psa_alg_from_pk_sigalg(child->sig_pk, hash_alg),
PSA_KEY_USAGE_VERIFY_HASH)) {
return -1; return -1;
} }