robin.thoni/ipxe - git rthoni.com

Aborescence: 2c011d77ae

Auteur	SHA1	Message	Date
Michael Brown	4010890a39	[crypto] Allow an error margin on X.509 certificate validity periods iPXE has no concept of the local time zone, mainly because there is no viable way to obtain time zone information in the absence of local state. This causes potential problems with newly-issued certificates and certificates that are about to expire. Avoid such problems by allowing an error margin of around 12 hours on certificate validity periods, similar to the error margin already allowed for OCSP response timestamps. Signed-off-by: Michael Brown <mcb30@ipxe.org>	il y a 12 ans
Michael Brown	944e023def	[crypto] Construct OCSP check URI Signed-off-by: Michael Brown <mcb30@ipxe.org>	il y a 12 ans
Michael Brown	57de8b6272	[crypto] Fix margin of error for OCSP checks Signed-off-by: Michael Brown <mcb30@ipxe.org>	il y a 12 ans
Michael Brown	b278094902	[crypto] Return a NULL OCSP check if construction fails Signed-off-by: Michael Brown <mcb30@ipxe.org>	il y a 12 ans
Michael Brown	39ac285a8a	[crypto] Add framework for OCSP Add support for constructing OCSP queries and parsing OCSP responses. (There is no support yet for actually issuing an OCSP query via an HTTP POST.) Signed-off-by: Michael Brown <mcb30@ipxe.org>	il y a 12 ans