openslx-ng/ipxe.git/src/crypto/x509.c, branch v1.20.1

[ocsp] Centralise test for whether or not an OCSP check is required

2018-03-18T20:25:01+00:00

Signed-off-by: Michael Brown

[crypto] Add certstat() to display basic certificate information

2016-08-31T14:41:15+00:00

Signed-off-by: Michael Brown

[crypto] Generalise X.509 "valid" field to a "flags" field

2016-08-25T14:41:57+00:00

Signed-off-by: Michael Brown

[crypto] Add image_x509() to extract X.509 certificates from image

2016-08-25T14:41:25+00:00

Signed-off-by: Michael Brown

[crypto] Support SHA-{224,384,512} in X.509 certificates

2015-08-02T15:54:24+00:00

Add support for SHA-224, SHA-384, and SHA-512 as digest algorithms in X.509 certificates, and allow the choice of public-key, cipher, and digest algorithms to be configured at build time via config/crypto.h. Originally-implemented-by: Tufan Karadere Signed-off-by: Michael Brown

[base16] Add buffer size parameter to base16_encode() and base16_decode()

2015-04-24T13:41:32+00:00

The current API for Base16 (and Base64) encoding requires the caller to always provide sufficient buffer space. This prevents the use of the generic encoding/decoding functionality in some situations, such as in formatting the hex setting types. Implement a generic hex_encode() (based on the existing format_hex_setting()), implement base16_encode() and base16_decode() in terms of the more generic hex_encode() and hex_decode(), and update all callers to provide the additional buffer length parameter. Signed-off-by: Michael Brown

[build] Fix the REQUIRE_SYMBOL mechanism

2015-03-05T00:59:38+00:00

At some point in the past few years, binutils became more aggressive at removing unused symbols. To function as a symbol requirement, a relocation record must now be in a section marked with @progbits and must not be in a section which gets discarded during the link (either via --gc-sections or via /DISCARD/). Update REQUIRE_SYMBOL() to generate relocation records meeting these criteria. To minimise the impact upon the final binary size, we use existing symbols (specified via the REQUIRING_SYMBOL() macro) as the relocation targets where possible. We use R_386_NONE or R_X86_64_NONE relocation types to prevent any actual unwanted relocation taking place. Where no suitable symbol exists for REQUIRING_SYMBOL() (such as in config.c), the macro PROVIDE_REQUIRING_SYMBOL() can be used to generate a one-byte-long symbol to act as the relocation target. If there are versions of binutils for which this approach fails, then the fallback will probably involve killing off REQUEST_SYMBOL(), redefining REQUIRE_SYMBOL() to use the current definition of REQUEST_SYMBOL(), and postprocessing the linked ELF file with something along the lines of "nm -u | wc -l" to check that there are no undefined symbols remaining. Signed-off-by: Michael Brown

[legal] Relicense files under GPL2_OR_LATER_OR_UBDL

2015-03-02T14:17:31+00:00

Relicense files for which I am the sole author (as identified by util/relicense.pl). Signed-off-by: Michael Brown

[crypto] Fix debug message

2014-07-12T13:24:40+00:00

Signed-off-by: Michael Brown

[crypto] Add support for iPAddress subject alternative names

2014-07-11T15:55:14+00:00

Originally-implemented-by: Jarrod Johnson Signed-off-by: Michael Brown