[PATCH 0/3] Add X.509 CRL support

This series adds X.509 Certificate Revocation List (CRL) parsing with
indirect CRL support per RFC 5280. Revoked certificates are blacklisted
using SHA-256 hash of serial+issuer.

The ASN.1 compiler is fixed to handle OPTIONAL fields in SEQUENCE/SET OF
and TYPE_REF constructs, which is required for the new CRL definitions.

Timofei Novikov (3):
  ASN.1: fix OPTIONAL for SEQUENCE OF and TYPE_REF
  x509: add CRL parser with indirect CRL support
  x509: add CRL signature verification support

 certs/blacklist.c                         |  17 ++-
 crypto/asymmetric_keys/Makefile           |   8 +-
 crypto/asymmetric_keys/x509_cert_parser.c | 132 ++++++++++++++++++++++
 crypto/asymmetric_keys/x509_crl.asn1      |  59 ++++++++++
 crypto/asymmetric_keys/x509_idp.asn1      |  12 ++
 crypto/asymmetric_keys/x509_loader.c      | 113 ++++++++++++++++++
 crypto/asymmetric_keys/x509_parser.h      |  18 +++
 crypto/asymmetric_keys/x509_public_key.c  |  21 ++++
 include/keys/asymmetric-type.h            |   4 +
 include/keys/system_keyring.h             |   2 +
 include/linux/oid_registry.h              |   4 +
 scripts/asn1_compiler.c                   |  12 +-
 12 files changed, 395 insertions(+), 7 deletions(-)
 create mode 100644 crypto/asymmetric_keys/x509_crl.asn1
 create mode 100644 crypto/asymmetric_keys/x509_idp.asn1

-- 
2.43.0