robin.thoni/ipxe - git rthoni.com

Struktur: 9978e2cb37

Autor	SHA1	Nachricht	Datum
Michael Brown	c3b4860ce3	[legal] Update FSF mailing address in GPL licence texts Suggested-by: Daniel P. Berrange <berrange@redhat.com> Signed-off-by: Michael Brown <mcb30@ipxe.org>	vor 12 Jahren
Michael Brown	557f467bab	[crypto] Allow certificate chains to be long-lived data structures At present, certificate chain validation is treated as an instantaneous process that can be carried out using only data that is already in memory. This model does not allow for validation to include non-instantaneous steps, such as downloading a cross-signing certificate, or determining certificate revocation status via OCSP. Redesign the internal representation of certificate chains to allow chains to outlive the scope of the original source of certificates (such as a TLS Certificate record). Allow for certificates to be cached, so that each certificate needs to be validated only once. Signed-off-by: Michael Brown <mcb30@ipxe.org>	vor 12 Jahren
Michael Brown	2d9d0adc4e	[crypto] Add previous certificate in chain as a parameter to parse_next() Signed-off-by: Michael Brown <mcb30@ipxe.org>	vor 12 Jahren
Michael Brown	9a03a8e3d2	[test] Add X.509 self-tests Signed-off-by: Michael Brown <mcb30@ipxe.org>	vor 12 Jahren