krb5: add extra sanity check in pk_verify_sign()
commitd34700b4d98b611298935403a48af3ee7f228235
authorLuke Howard <lukeh@padl.com>
Tue, 10 Aug 2021 06:24:49 +0000 (10 16:24 +1000)
committerLuke Howard <lukeh@padl.com>
Tue, 10 Aug 2021 06:25:26 +0000 (10 16:25 +1000)
tree39ec07b725d1b91f0244a1f49f0de1cb8902de37
parentef1d63a997a672096312bfe29131fc53e8abbe9b
krb5: add extra sanity check in pk_verify_sign()

Assert either PKINIT signer certificate was validated, or caller requested no
KDC certificate validation.
lib/krb5/pkinit.c