summaryrefslogtreecommitdiffstats
path: root/src/config
diff options
context:
space:
mode:
authorMichael Brown2016-03-24 20:25:03 +0100
committerMichael Brown2016-03-24 20:25:03 +0100
commitf8e1678b84fc3119ce515e0c1a84881bb9ce1c36 (patch)
tree2aee9b4198730ed4c0f9672bc6e56079cabcadf4 /src/config
parent[prefix] Use CRC32 to verify each block prior to decompression (diff)
downloadipxe-f8e1678b84fc3119ce515e0c1a84881bb9ce1c36.tar.gz
ipxe-f8e1678b84fc3119ce515e0c1a84881bb9ce1c36.tar.xz
ipxe-f8e1678b84fc3119ce515e0c1a84881bb9ce1c36.zip
[crypto] Allow cross-certificate source to be configured at build time
Provide a build option CROSSCERT in config/crypto.h to allow the default cross-signed certificate source to be configured at build time. The ${crosscert} setting may still be used to reconfigure the cross-signed certificate source at runtime. Signed-off-by: Michael Brown <mcb30@ipxe.org>
Diffstat (limited to 'src/config')
-rw-r--r--src/config/crypto.h8
1 files changed, 8 insertions, 0 deletions
diff --git a/src/config/crypto.h b/src/config/crypto.h
index bccfc04b..8f885c55 100644
--- a/src/config/crypto.h
+++ b/src/config/crypto.h
@@ -50,6 +50,14 @@ FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
*/
#define TIMESTAMP_ERROR_MARGIN ( ( 12 * 60 + 30 ) * 60 )
+/** Default cross-signed certificate source
+ *
+ * This is the default location from which iPXE will attempt to
+ * download cross-signed certificates in order to complete a
+ * certificate chain.
+ */
+#define CROSSCERT "http://ca.ipxe.org/auto"
+
#include <config/named.h>
#include NAMED_CONFIG(crypto.h)
#include <config/local/crypto.h>