robin.thoni/ipxe - git rthoni.com

Дрво: ee3636370d

Аутор	SHA1	Порука	Датум
Michael Brown	4010890a39	[crypto] Allow an error margin on X.509 certificate validity periods iPXE has no concept of the local time zone, mainly because there is no viable way to obtain time zone information in the absence of local state. This causes potential problems with newly-issued certificates and certificates that are about to expire. Avoid such problems by allowing an error margin of around 12 hours on certificate validity periods, similar to the error margin already allowed for OCSP response timestamps. Signed-off-by: Michael Brown <mcb30@ipxe.org>	пре 13 година
Michael Brown	944e023def	[crypto] Construct OCSP check URI Signed-off-by: Michael Brown <mcb30@ipxe.org>	пре 13 година
Michael Brown	57de8b6272	[crypto] Fix margin of error for OCSP checks Signed-off-by: Michael Brown <mcb30@ipxe.org>	пре 13 година
Michael Brown	b278094902	[crypto] Return a NULL OCSP check if construction fails Signed-off-by: Michael Brown <mcb30@ipxe.org>	пре 13 година
Michael Brown	39ac285a8a	[crypto] Add framework for OCSP Add support for constructing OCSP queries and parsing OCSP responses. (There is no support yet for actually issuing an OCSP query via an HTTP POST.) Signed-off-by: Michael Brown <mcb30@ipxe.org>	пре 13 година