openslx-ng/ipxe.git/src/include/ipxe, branch master

[ocsp] Accept response certID with missing hashAlgorithm parameters

2019-03-10T18:13:52+00:00

One of the design goals of ASN.1 DER is to provide a canonical serialization of a data structure, thereby allowing for equality of values to be tested by simply comparing the serialized bytes. Some OCSP servers will modify the request certID to omit the optional (and null) "parameters" portion of the hashAlgorithm. This is arguably legal but breaks the ability to perform a straightforward bitwise comparison on the entire certID field between request and response. Fix by comparing the OID-identified hashAlgorithm separately from the remaining certID fields. Originally-fixed-by: Thilo Fromm Signed-off-by: Michael Brown

[tls] Display validator messages only while validation is in progress

2019-03-10T17:27:33+00:00

Allow the cipherstream to report progress status messages during connection establishment. Signed-off-by: Michael Brown

[tls] Support stateless session resumption

2019-03-06T15:11:18+00:00

Add support for RFC5077 session ticket extensions to allow for stateless TLS session resumption. Signed-off-by: Michael Brown

[tls] Support stateful session resumption

2019-02-21T11:32:25+00:00

Record the session ID (if any) provided by the server and attempt to reuse it for any concurrent connections to the same server. If multiple connections are initiated concurrently (e.g. when using PeerDist) then defer sending the ClientHello for all but the first connection, to allow time for the first connection to potentially obtain a session ID (and thereby speed up the negotiation for all remaining connections). Signed-off-by: Michael Brown

[efi] Blacklist the Dell Ip4ConfigDxe driver

2019-02-19T19:02:11+00:00

On a Dell OptiPlex 7010, calling DisconnectController() on the LOM device handle will lock up the system. Debugging shows that execution is trapped in an infinite loop that is somehow trying to reconnect drivers (without going via ConnectController()). The problem can be reproduced in the UEFI shell with no iPXE code present, by using the "disconnect" command. Experimentation shows that the only fix is to unload (rather than just disconnect) the "Ip4ConfigDxe" driver. Add the concept of a blacklist of UEFI drivers that will be automatically unloaded when iPXE runs as an application, and add the Dell Ip4ConfigDxe driver to this blacklist. Signed-off-by: Michael Brown

[init] Show startup and shutdown function names in debug messages

2019-01-25T14:53:43+00:00

Signed-off-by: Michael Brown

[intelxl] Add driver for Intel 40 Gigabit Ethernet NICs

2018-07-17T11:14:43+00:00

Signed-off-by: Michael Brown

[icplus] Add driver for IC+ network card

2018-04-20T14:26:09+00:00

Signed-off-by: Sylvie Barlow Signed-off-by: Michael Brown

[mii] Add bit-bashing interface

2018-04-20T14:24:33+00:00

Signed-off-by: Sylvie Barlow Modified-by: Michael Brown Signed-off-by: Michael Brown

[mii] Add mii_find()

2018-04-20T14:21:32+00:00

Add the function mii_find() in order to locate the PHY address. Signed-off-by: Sylvie Barlow Signed-off-by: Michael Brown