robin.thoni/ipxe - git rthoni.com

Michael Brown 02f1f3066d [crypto] Allow trusted root certificate to be changed without a rebuild Changing the trusted root certificate currently requires a rebuild of the iPXE binary, which may be inconvenient or impractical. Allow the list of trusted root certificate fingerprints to be overridden using the "trust" setting, but only at the point of iPXE initialisation. This prevents untrusted sources of settings (e.g. DHCP) from subverting the chain of trust, while allowing trustworthy sources to change the trusted root certificate without requiring a rebuild. The basic idea is that if you are able to manipulate a trustworthy source of settings (e.g. VMware GuestInfo or non-volatile stored options), then you would be able to replace the iPXE binary anyway, and so no security is lost by allowing such sources to override the list of trusted root certificates. Signed-off-by: Michael Brown <mcb30@ipxe.org>		vor 12 Jahren
contrib	[contrib] Fix rom-o-matic	vor 13 Jahren
src	[crypto] Allow trusted root certificate to be changed without a rebuild	vor 12 Jahren
COPYING	Initial revision	vor 20 Jahren
COPYRIGHTS	[build] Rename gPXE to iPXE	vor 15 Jahren
README	[doc] Re-add README file	vor 14 Jahren

iPXE README File

Quick start guide:

   cd src
   make

For any more detailed instructions, see http://ipxe.org