Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Rimtool validation should require signing cert #726

Closed
chubtub opened this issue Mar 1, 2024 · 0 comments
Closed

Rimtool validation should require signing cert #726

chubtub opened this issue Mar 1, 2024 · 0 comments
Assignees
@chubtub

Comments

@chubtub
Copy link
Contributor

chubtub commented Mar 1, 2024

The rimtool in its current state cannot reliably validate a signed base RIM without an embedded signing cert. cannot be used to validate against the truststore provided to rim -v <base RIM> -t <truststore>. Therefore validation should require the signing cert as an input via -p <public cert>.
@chubtub chubtub self-assigned this Mar 1, 2024
@chubtub chubtub mentioned this issue Mar 6, 2024
Merged
chubtub added a commit that referenced this issue Mar 18, 2024
@chubtub
Merge pull request #728 from nsacyber/v3_issue-726
3ac30cf 
[#726] Verify base RIM signature against truststore using public signing cert
@chubtub chubtub closed this as completed Mar 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@chubtub chubtub

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@chubtub