Vitaly,
On Wed, 2019-07-17 at 00:49 +0300, Vitaly Chikunov wrote:
> > EVP_PKEY *read_pub_pkey(const char *keyfile, int x509)
> > {
> > FILE *fp;
> > X509 *crt = NULL;
> > EVP_PKEY *pkey = NULL;
> > + int found;
> >
> > if (!keyfile)
> > return NULL;
> >
> > fp = fopen(keyfile, "r");
> > if (!fp) {
> > - log_err("Failed to open keyfile: %s\n", keyfile);
> > + found = lookup_keyfile_name(keyfile);
> > + if (!found)
> > + log_err("Failed to open keyfile: %s\n", keyfile);
> > return NULL;
>
>
> Now filename list is decoupled from keys themselves. Also we have key
> list creation in init_public_keys(). Maybe we should just always call
> init_public_keys for verify operations?
With v2 of "ima_evm_utils: erroneous "verification failed: 0 (invalid
padding)" message", I was able to drop this patch.
Mimi
