138 	struct x509_certificate *x509;  in pkcs7_find_key()  local
143 	for (x509 = pkcs7->certs; x509; x509 = x509->next, certix++) {  in pkcs7_find_key()
149 		if (!asymmetric_key_id_same(x509->id, sinfo->signing_cert_id))  in pkcs7_find_key()
154 		if (x509->pub->pkey_algo != sinfo->sig.pkey_algo) {  in pkcs7_find_key()
160 		sinfo->signer = x509;  in pkcs7_find_key()
179 	struct x509_certificate *x509 = sinfo->signer, *p;  in pkcs7_verify_sig_chain()  local
190 			 x509->subject,  in pkcs7_verify_sig_chain()
191 			 x509->raw_serial_size, x509->raw_serial);  in pkcs7_verify_sig_chain()
192 		x509->seen = true;  in pkcs7_verify_sig_chain()
193 		ret = x509_get_sig_params(x509);  in pkcs7_verify_sig_chain()
197 		pr_debug("- issuer %s\n", x509->issuer);  in pkcs7_verify_sig_chain()
198 		if (x509->akid_id)  in pkcs7_verify_sig_chain()
200 				 x509->akid_id->len, x509->akid_id->data);  in pkcs7_verify_sig_chain()
201 		if (x509->akid_skid)  in pkcs7_verify_sig_chain()
203 				 x509->akid_skid->len, x509->akid_skid->data);  in pkcs7_verify_sig_chain()
205 		if ((!x509->akid_id && !x509->akid_skid) ||  in pkcs7_verify_sig_chain()
206 		    strcmp(x509->subject, x509->issuer) == 0) {  in pkcs7_verify_sig_chain()
213 			if (x509->raw_subject_size != x509->raw_issuer_size ||  in pkcs7_verify_sig_chain()
214 			    memcmp(x509->raw_subject, x509->raw_issuer,  in pkcs7_verify_sig_chain()
215 				   x509->raw_issuer_size) != 0)  in pkcs7_verify_sig_chain()
218 			ret = x509_check_signature(x509->pub, x509);  in pkcs7_verify_sig_chain()
221 			x509->signer = x509;  in pkcs7_verify_sig_chain()
229 		auth = x509->akid_id;  in pkcs7_verify_sig_chain()
239 			auth = x509->akid_skid;  in pkcs7_verify_sig_chain()
259 		if (x509->akid_skid &&  in pkcs7_verify_sig_chain()
260 		    !asymmetric_key_id_same(p->skid, x509->akid_skid)) {  in pkcs7_verify_sig_chain()
262 				sinfo->index, x509->index, p->index);  in pkcs7_verify_sig_chain()
272 		ret = x509_check_signature(p->pub, x509);  in pkcs7_verify_sig_chain()
275 		x509->signer = p;  in pkcs7_verify_sig_chain()
276 		if (x509 == p) {  in pkcs7_verify_sig_chain()
280 		x509 = p;  in pkcs7_verify_sig_chain()
380 	struct x509_certificate *x509;  in pkcs7_verify()  local
424 	for (n = 0, x509 = pkcs7->certs; x509; x509 = x509->next, n++) {  in pkcs7_verify()
425 		ret = x509_get_sig_params(x509);  in pkcs7_verify()