diff options
| author | Michael Brown | 2018-03-18 21:27:49 +0100 |
|---|---|---|
| committer | Michael Brown | 2018-03-18 21:30:21 +0100 |
| commit | 9759860ec0c30685b53568b10caa5a91428bc7bf (patch) | |
| tree | 21eeee70897d800f3291ce614658a75e3284aa8b /src/config | |
| parent | [ocsp] Centralise test for whether or not an OCSP check is required (diff) | |
| download | ipxe-9759860ec0c30685b53568b10caa5a91428bc7bf.tar.gz ipxe-9759860ec0c30685b53568b10caa5a91428bc7bf.tar.xz ipxe-9759860ec0c30685b53568b10caa5a91428bc7bf.zip | |
[ocsp] Allow OCSP checks to be disabled
Some CAs provide non-functional OCSP servers, and some clients are
forced to operate on networks without access to the OCSP servers.
Allow the user to explicitly disable the use of OCSP checks by
undefining OCSP_CHECK in config/crypto.h.
Signed-off-by: Michael Brown <mcb30@ipxe.org>
Diffstat (limited to 'src/config')
| -rw-r--r-- | src/config/crypto.h | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/src/config/crypto.h b/src/config/crypto.h index 8f885c55..1edcdce4 100644 --- a/src/config/crypto.h +++ b/src/config/crypto.h @@ -58,6 +58,14 @@ FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL ); */ #define CROSSCERT "http://ca.ipxe.org/auto" +/** Perform OCSP checks when applicable + * + * Some CAs provide non-functional OCSP servers, and some clients are + * forced to operate on networks without access to the OCSP servers. + * Allow the user to explicitly disable the use of OCSP checks. + */ +#define OCSP_CHECK + #include <config/named.h> #include NAMED_CONFIG(crypto.h) #include <config/local/crypto.h> |