robin.thoni/ipxe - git rthoni.com

Tree: 9978e2cb37

Auteur	SHA1	Bericht	Datum
Michael Brown	c3b4860ce3	[legal] Update FSF mailing address in GPL licence texts Suggested-by: Daniel P. Berrange <berrange@redhat.com> Signed-off-by: Michael Brown <mcb30@ipxe.org>	12 jaren geleden
Michael Brown	557f467bab	[crypto] Allow certificate chains to be long-lived data structures At present, certificate chain validation is treated as an instantaneous process that can be carried out using only data that is already in memory. This model does not allow for validation to include non-instantaneous steps, such as downloading a cross-signing certificate, or determining certificate revocation status via OCSP. Redesign the internal representation of certificate chains to allow chains to outlive the scope of the original source of certificates (such as a TLS Certificate record). Allow for certificates to be cached, so that each certificate needs to be validated only once. Signed-off-by: Michael Brown <mcb30@ipxe.org>	12 jaren geleden
Michael Brown	2d9d0adc4e	[crypto] Add previous certificate in chain as a parameter to parse_next() Signed-off-by: Michael Brown <mcb30@ipxe.org>	12 jaren geleden
Michael Brown	9a03a8e3d2	[test] Add X.509 self-tests Signed-off-by: Michael Brown <mcb30@ipxe.org>	12 jaren geleden