robin.thoni/ipxe - git rthoni.com

Drzewo: 2c011d77ae

Autor	SHA1	Wiadomość	Data
Michael Brown	c3b4860ce3	[legal] Update FSF mailing address in GPL licence texts Suggested-by: Daniel P. Berrange <berrange@redhat.com> Signed-off-by: Michael Brown <mcb30@ipxe.org>	12 lat temu
Michael Brown	071171e807	[image] Allow "imgtrust" to automatically download cross-signed certificates Signed-off-by: Michael Brown <mcb30@ipxe.org>	12 lat temu
Michael Brown	557f467bab	[crypto] Allow certificate chains to be long-lived data structures At present, certificate chain validation is treated as an instantaneous process that can be carried out using only data that is already in memory. This model does not allow for validation to include non-instantaneous steps, such as downloading a cross-signing certificate, or determining certificate revocation status via OCSP. Redesign the internal representation of certificate chains to allow chains to outlive the scope of the original source of certificates (such as a TLS Certificate record). Allow for certificates to be cached, so that each certificate needs to be validated only once. Signed-off-by: Michael Brown <mcb30@ipxe.org>	12 lat temu
Michael Brown	2d11a46b71	[image] Log results of image signature checks Signed-off-by: Michael Brown <mcb30@ipxe.org>	12 lat temu
Michael Brown	d1465f7b0b	[image] Add the "imgtrust" and "imgverify" commands Signed-off-by: Michael Brown <mcb30@ipxe.org>	12 lat temu