Check ca ku presence

diff --git a/cyac/cmd/cer-verify/cer-verify.c b/cyac/cmd/cer-verify/cer-verify.c
index 9643a29d30e5c4ae6f03dbbd3afde5ede2b002b6b450dde89f4e15f2535ae2ee..8c4018d68b70cb43b483fa60fc56fe953cafffc870a0a3f8b6a53ba15675bc15 100644 (file)
--- a/cyac/cmd/cer-verify/cer-verify.c
+++ b/cyac/cmd/cer-verify/cer-verify.c
@@ -89,10 +89,18 @@ main(int argc, char **argv)
             fputs("\n", stdout);
             return EXIT_FAILURE;
         }
-        fputs("ok\n", stdout);
         if (memcmp(toVerify->sid, toVerify->pkid, 16) == 0) {
+            fputs("ok\n", stdout);
             break;
         }
+        {
+            ptrdiff_t ku = YACItemsGetByKey(&(verifier->items), verifier->load, "ku");
+            if ((ku == -1) || YACItemsGetByKey(&(verifier->items), ku, "ca") == -1) {
+                fputs("no ca ku\n", stdout);
+                return EXIT_FAILURE;
+            }
+        }
+        fputs("ok\n", stdout);
         toVerify = verifier;
     }
     return EXIT_SUCCESS;