robin.thoni/ipxe - git rthoni.com

Michael Brown b6ffe28a21 [ocsp] Accept response certID with missing hashAlgorithm parameters One of the design goals of ASN.1 DER is to provide a canonical serialization of a data structure, thereby allowing for equality of values to be tested by simply comparing the serialized bytes. Some OCSP servers will modify the request certID to omit the optional (and null) "parameters" portion of the hashAlgorithm. This is arguably legal but breaks the ability to perform a straightforward bitwise comparison on the entire certID field between request and response. Fix by comparing the OID-identified hashAlgorithm separately from the remaining certID fields. Originally-fixed-by: Thilo Fromm <Thilo@kinvolk.io> Signed-off-by: Michael Brown <mcb30@ipxe.org>		5 yıl önce
contrib	[coverity] Add Coverity user model	7 yıl önce
src	[ocsp] Accept response certID with missing hashAlgorithm parameters	5 yıl önce
.travis.yml	[travis] Integrate with Coverity Scan	7 yıl önce
COPYING	[legal] Update GPLv2 licence text	9 yıl önce
COPYING.GPLv2	[legal] Update GPLv2 licence text	9 yıl önce
COPYING.UBDL	[legal] Add support for the Unmodified Binary Distribution Licence	9 yıl önce
README	[doc] Re-add README file	14 yıl önce

iPXE README File

Quick start guide:

   cd src
   make

For any more detailed instructions, see http://ipxe.org