Previous section.

Common Security: CDSA and CSSM
Copyright © 1997 The Open Group

NAME

ISL_VerifyLoadedModuleAndCredentials

SYNOPSIS

ISL_VERIFIED_MODULE_PTR ISL_VerifyLoadedModuleAndCredentials
    (ISL_CONST_DATA Credentials,
    ISL_CONST_DATA SectionName,
    ISL_CONST_DATA Signer,
    ISL_CONST_DATA PublicKey)

DESCRIPTION

The purpose of this function is to verify the integrity of the credentials associated with a loaded object code module and the integrity of the object code itself. Verification is accomplished as follows:

Certificates embedded in the PKCS#7 signature as well as free-standing X.509 certificates in the credentials directory can be used in the certificate chain.

This function combines many smaller functions into one call for a common case. If greater flexibility is needed, a series of calls that includes ISL_CreateCertificateChain, ISL_CopyCertificateChain, ISL_CreateVerifiedSignatureRootWithCertificate, ISL_FindManifestSection, and ISL_VerifyLoadedModule provides the same functionality. Cleanup is done by ISL_RecycleVerifiedModuleCredentials.

PARAMETERS

Credentials (input)

The full file name to the signature file.

SectionName (input)

The section name of the manifest that refers to the object code to be verified.

Signer (input)

The signer information (for directly signed signatures) or issuer name (if signed by certificates). If the Signer is NULL, a default value is assumed.

PublicKey (input)

This is the public key of the signer or root certificate authority. The representation for the key must be compatible with the format of public keys in the selected certificate format. If the PublicKey is NULL, a default value is assumed.

RETURN VALUE

Pointer to a verified object if verification is successful, or NULL if verification is unsuccessful.

SEE ALSO

ISL_CreateCertificateChain,
ISL_FindManifestSection,
ISL_CopyCertificateChain,
ISL_VerifyLoadedModule,
ISL_CreateVerifiedSignatureRoot,
ISL_RecycleVerifiedModuleCredentials,
ISL_FindRegistryAttribute

Why not acquire a nicely bound hard copy?
Click here to return to the publication details or order a copy of this publication.
You should also read the legal notice explaining the terms and conditions relating to the CDSA documentation.

Contents Next section Index