Fork of ipxe; additional commands and features https://git.openslx.org/openslx-ng/ipxe.git/atom/src/config/crypto.h?h=v1.20.1 2018-03-18T20:30:21+00:00 2018-03-18T20:30:21+00:00 Michael Brown 2018-03-18T20:27:49+00:00 urn:sha1:9759860ec0c30685b53568b10caa5a91428bc7bf Some CAs provide non-functional OCSP servers, and some clients are forced to operate on networks without access to the OCSP servers. Allow the user to explicitly disable the use of OCSP checks by undefining OCSP_CHECK in config/crypto.h. Signed-off-by: Michael Brown <mcb30@ipxe.org> 2016-03-24T19:25:03+00:00 Michael Brown 2016-03-24T19:25:03+00:00 urn:sha1:f8e1678b84fc3119ce515e0c1a84881bb9ce1c36 Provide a build option CROSSCERT in config/crypto.h to allow the default cross-signed certificate source to be configured at build time. The ${crosscert} setting may still be used to reconfigure the cross-signed certificate source at runtime. Signed-off-by: Michael Brown <mcb30@ipxe.org> 2015-08-02T15:54:24+00:00 Michael Brown 2015-08-02T15:54:24+00:00 urn:sha1:b1caa48e4bb3f15e7eb749e0c3470436ebff3435 Add support for SHA-224, SHA-384, and SHA-512 as digest algorithms in X.509 certificates, and allow the choice of public-key, cipher, and digest algorithms to be configured at build time via config/crypto.h. Originally-implemented-by: Tufan Karadere <tufank@gmail.com> Signed-off-by: Michael Brown <mcb30@ipxe.org> 2015-03-02T14:17:31+00:00 Michael Brown 2015-03-02T11:54:40+00:00 urn:sha1:b6ee89ffb5029d02cb1d8668757fa2b74b11e0a3 Relicense files for which I am the sole author (as identified by util/relicense.pl). Signed-off-by: Michael Brown <mcb30@ipxe.org> 2014-08-20T11:36:44+00:00 Michael Brown 2014-08-19T15:17:25+00:00 urn:sha1:c801cb29d64764fa8082ec2ab17dd12f74b3143f Allow named configurations to be specified via the CONFIG=... build parameter. For headers in config/*.h which support named configurations, the following files will be included when building with CONFIG=<name>: - config/defaults/<platform>.h (e.g. config/defaults/pcbios.h) - config/<header>.h - config/<name>/<header>.h (only if the directory config/<name> exists) - config/local/<header>.h (autocreated if necessary) - config/local/<name>/<header>.h (autocreated if necessary) This mechanism allows for predefined named configurations to be checked in to the source tree, as a directory config/<name> containing all of the required header files. The mechanism also allows for users to define multiple local configurations, by creating header files in the directory config/local/<name>. Note that the config/*.h files which are used only to configure internal iPXE APIs (e.g. config/ioapi.h) cannot be modified via a named configuration. This avoids rebuilding the entire iPXE codebase whenever switching to a different named configuration. Inspired-by: Robin Smidsrød <robin@smidsrod.no> Tested-by: Robin Smidsrød <robin@smidsrod.no> Signed-off-by: Michael Brown <mcb30@ipxe.org> 2014-03-30T19:08:00+00:00 Michael Brown 2014-03-30T19:07:14+00:00 urn:sha1:7c7c95709482c769fb081471f2ff8701dbd5b068 Signed-off-by: Michael Brown <mcb30@ipxe.org>