commit 46db4b070c518d278e8e419f76ccfbb2883eebeb
author Manuel Pégourié-Gonnard <mpg@elzevir.fr> Thu Jun 05 16:34:18 2014 +0200
committer Manuel Pégourié-Gonnard <mpg@elzevir.fr> Thu Jun 05 17:08:46 2014 +0200
tree 872ce0e9fa80b0daea2a5fa4eb21e363f6740c5e
parent bf696d030b078db77c13d926ef1c16559780a711

Use pk_verify_ext() in x509_crt.c

library/x509_crt.c

diff --git a/library/x509_crt.c b/library/x509_crt.c
index d6164a8..fdcc969 100644
--- a/library/x509_crt.c
+++ b/library/x509_crt.c
@@ -1659,24 +1659,9 @@
             continue;
         }
 
-#if defined(POLARSSL_RSASSA_PSS_CERTIFICATES)
-        if( child->sig_pk == POLARSSL_PK_RSASSA_PSS )
-        {
-            if( pk_can_do( &trust_ca->pk, POLARSSL_PK_RSA ) == 0 ||
-                rsa_rsassa_pss_verify( pk_rsa( trust_ca->pk ),
-                                       NULL, NULL, RSA_PUBLIC,
-                                       child->sig_md,
-                                       md_info->size, hash,
-                                       child->sig.p ) != 0 )
-            {
-                continue;
-            }
-        }
-        else
-#endif
-        if( pk_can_do( &trust_ca->pk, child->sig_pk ) == 0 ||
-            pk_verify( &trust_ca->pk, child->sig_md, hash, md_info->size,
-                       child->sig.p, child->sig.len ) != 0 )
+        if( pk_verify_ext( child->sig_pk, child->sig_opts, &trust_ca->pk,
+                           child->sig_md, hash, md_info->size,
+                           child->sig.p, child->sig.len ) != 0 )
         {
             continue;
         }
@@ -1763,24 +1748,9 @@
     {
         md( md_info, child->tbs.p, child->tbs.len, hash );
 
-#if defined(POLARSSL_RSASSA_PSS_CERTIFICATES)
-        if( child->sig_pk == POLARSSL_PK_RSASSA_PSS )
-        {
-            if( pk_can_do( &parent->pk, POLARSSL_PK_RSA ) == 0 ||
-                rsa_rsassa_pss_verify( pk_rsa( parent->pk ),
-                                       NULL, NULL, RSA_PUBLIC,
-                                       child->sig_md,
-                                       md_info->size, hash,
-                                       child->sig.p ) != 0 )
-            {
-                *flags |= BADCERT_NOT_TRUSTED;
-            }
-        }
-        else
-#endif
-        if( pk_can_do( &parent->pk, child->sig_pk ) == 0 ||
-            pk_verify( &parent->pk, child->sig_md, hash, md_info->size,
-                       child->sig.p, child->sig.len ) != 0 )
+        if( pk_verify_ext( child->sig_pk, child->sig_opts, &parent->pk,
+                           child->sig_md, hash, md_info->size,
+                           child->sig.p, child->sig.len ) != 0 )
         {
             *flags |= BADCERT_NOT_TRUSTED;
         }