robin.thoni/ipxe - git rthoni.com

Strom: 2c011d77ae

Autor	SHA1	Zpráva	Datum
Michael Brown	4010890a39	[crypto] Allow an error margin on X.509 certificate validity periods iPXE has no concept of the local time zone, mainly because there is no viable way to obtain time zone information in the absence of local state. This causes potential problems with newly-issued certificates and certificates that are about to expire. Avoid such problems by allowing an error margin of around 12 hours on certificate validity periods, similar to the error margin already allowed for OCSP response timestamps. Signed-off-by: Michael Brown <mcb30@ipxe.org>	před 12 roky
Michael Brown	944e023def	[crypto] Construct OCSP check URI Signed-off-by: Michael Brown <mcb30@ipxe.org>	před 12 roky
Michael Brown	57de8b6272	[crypto] Fix margin of error for OCSP checks Signed-off-by: Michael Brown <mcb30@ipxe.org>	před 12 roky
Michael Brown	b278094902	[crypto] Return a NULL OCSP check if construction fails Signed-off-by: Michael Brown <mcb30@ipxe.org>	před 12 roky
Michael Brown	39ac285a8a	[crypto] Add framework for OCSP Add support for constructing OCSP queries and parsing OCSP responses. (There is no support yet for actually issuing an OCSP query via an HTTP POST.) Signed-off-by: Michael Brown <mcb30@ipxe.org>	před 12 roky