openslx-ng/ipxe.git/src/include, branch v1.20.1

[peerdist] Limit number of concurrent raw block downloads

2019-08-16T21:19:50+00:00

Raw block downloads are expensive if the origin server uses HTTPS, since each concurrent download will require local TLS resources (including potentially large received encrypted data buffers). Raw block downloads may also be prohibitively slow to initiate when the origin server is using HTTPS and client certificates. Origin servers for PeerDist downloads are likely to be running IIS, which has a bug that breaks session resumption and requires each connection to go through the full client certificate verification. Limit the total number of concurrent raw block downloads to ameliorate these problems. Signed-off-by: Michael Brown

[process] Add PROC_INIT() for initialising static processes

2019-08-16T21:19:48+00:00

Signed-off-by: Michael Brown

[fdt] Add ability to parse a MAC address from a flattened device tree

2019-07-19T16:35:39+00:00

The Raspberry Pi NIC has no EEPROM to hold the MAC address. The platform firmware (e.g. UEFI or U-Boot) will typically obtain the MAC address from the VideoCore firmware and add it to the device tree, which is then made available to subsequent programs such as iPXE or the Linux kernel. Add the ability to parse a flattened device tree and to extract the MAC address. Signed-off-by: Michael Brown

[build] Fix use of inline assembly on GCC 8 ARM64 builds

2019-07-14T13:05:48+00:00

Commit 1a7746603 ("[build] Fix use of inline assembly on GCC 4.8 ARM64 builds") switched from using "%c0" to "%a0" in order to avoid an "invalid operand prefix" error on the ARM64 version of GCC 4.8. It appears that the ARM64 version of GCC 8 now produces an "invalid address mode" error for the "%a0" form, but is happy with the original "%c0" form. Switch back to using the "%c0" form, on the assumption that the requirement for "%a0" was a temporary aberration. Originally-fixed-by: John L. Jolly Signed-off-by: Michael Brown

[intelxl] Add driver for Intel 40 Gigabit Ethernet NIC virtual functions

2019-04-27T19:26:18+00:00

Signed-off-by: Michael Brown

[vlan] Provide vlan_netdev_rx() and vlan_netdev_rx_err()

2019-04-27T19:25:00+00:00

The Hermon driver uses vlan_find() to identify the appropriate VLAN device for packets that are received with the VLAN tag already stripped out by the hardware. Generalise this capability and expose it for use by other network card drivers. Signed-off-by: Michael Brown

[pci] Add support for PCI MSI-X interrupts

2019-04-24T10:41:38+00:00

The Intel 40 Gigabit Ethernet virtual functions support only MSI-X interrupts, and will write back completed interrupt descriptors only when the device attempts to raise an interrupt (or when a complete cacheline of receive descriptors has been completed). We cannot actually use MSI-X interrupts within iPXE, since we never have ownership of the APIC. However, an MSI-X interrupt is fundamentally just a DMA write of a single dword to an arbitrary address. We can therefore configure the device to "raise" an interrupt by writing a meaningless value to an otherwise unused memory location: this is sufficient to trigger the receive descriptor writeback logic. Signed-off-by: Michael Brown

[ocsp] Accept response certID with missing hashAlgorithm parameters

2019-03-10T18:13:52+00:00

One of the design goals of ASN.1 DER is to provide a canonical serialization of a data structure, thereby allowing for equality of values to be tested by simply comparing the serialized bytes. Some OCSP servers will modify the request certID to omit the optional (and null) "parameters" portion of the hashAlgorithm. This is arguably legal but breaks the ability to perform a straightforward bitwise comparison on the entire certID field between request and response. Fix by comparing the OID-identified hashAlgorithm separately from the remaining certID fields. Originally-fixed-by: Thilo Fromm Signed-off-by: Michael Brown

[tls] Display validator messages only while validation is in progress

2019-03-10T17:27:33+00:00

Allow the cipherstream to report progress status messages during connection establishment. Signed-off-by: Michael Brown

[tls] Support stateless session resumption

2019-03-06T15:11:18+00:00

Add support for RFC5077 session ticket extensions to allow for stateless TLS session resumption. Signed-off-by: Michael Brown