tree e546a6b5c7520d0615a3b98329ea0840ff3285dc
parent c61e5c930484140f4c6961cd68bfe55d64f5d77e
author Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> 1498730221 +0200
committer Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> 1502183210 +0200

Take shortcut for directly trusted EE cert

This is a slight change of behaviour in that the previous condition was:
- same subject
- signature matches
while the new condition is:
- exact same certificate

However the documentation for mbedtls_x509_crt_verify() (note on trust_ca)
mentions the new condition, so code that respected the documentation will keep
working.

In addition, this is a bit faster as it doesn't check the self-signature
(which never needs to be checked for certs in the trusted list).