in cli/mfg_cmds.go [581:616]
func verifyEmbeddedImages(m mfg.Mfg, man manifest.MfgManifest, iss []sec.PubSignKey, kes []sec.PrivEncKey) (string, bool) {
prefix := " images: "
good := true
imgs, err := m.ExtractImages(man)
if err != nil {
return prefix + fmt.Sprintf("BAD (%s)", err.Error()), false
}
var results [][]string
for _, img := range imgs {
st, stgood := verifyImageStructureStr(img)
ha, hagood := verifyImageHashStr(img, kes)
si, sigood := verifyImageSigsStr(img, iss)
results = append(results, []string{
st, ha, si,
})
if !stgood || !hagood || !sigood {
good = false
}
}
sub := "\n"
for i, r := range results {
if i != 0 {
sub += "\n"
}
sub += Indent(fmt.Sprintf("%d:\n", i), 12)
sub += strings.Join(IndentLines(r, 16), "\n")
}
return prefix + sub, good
}