summaryrefslogtreecommitdiffstats
path: root/src/net/validator.c
diff options
context:
space:
mode:
authorMichael Brown2016-03-24 20:25:03 +0100
committerMichael Brown2016-03-24 20:25:03 +0100
commitf8e1678b84fc3119ce515e0c1a84881bb9ce1c36 (patch)
tree2aee9b4198730ed4c0f9672bc6e56079cabcadf4 /src/net/validator.c
parent[prefix] Use CRC32 to verify each block prior to decompression (diff)
downloadipxe-f8e1678b84fc3119ce515e0c1a84881bb9ce1c36.tar.gz
ipxe-f8e1678b84fc3119ce515e0c1a84881bb9ce1c36.tar.xz
ipxe-f8e1678b84fc3119ce515e0c1a84881bb9ce1c36.zip
[crypto] Allow cross-certificate source to be configured at build time
Provide a build option CROSSCERT in config/crypto.h to allow the default cross-signed certificate source to be configured at build time. The ${crosscert} setting may still be used to reconfigure the cross-signed certificate source at runtime. Signed-off-by: Michael Brown <mcb30@ipxe.org>
Diffstat (limited to 'src/net/validator.c')
-rw-r--r--src/net/validator.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/src/net/validator.c b/src/net/validator.c
index db968398..57ad0e7b 100644
--- a/src/net/validator.c
+++ b/src/net/validator.c
@@ -41,6 +41,7 @@ FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
#include <ipxe/crc32.h>
#include <ipxe/ocsp.h>
#include <ipxe/validator.h>
+#include <config/crypto.h>
/** @file
*
@@ -133,7 +134,7 @@ const struct setting crosscert_setting __setting ( SETTING_CRYPTO, crosscert )={
};
/** Default cross-signed certificate source */
-static const char crosscert_default[] = "http://ca.ipxe.org/auto";
+static const char crosscert_default[] = CROSSCERT;
/**
* Append cross-signing certificates to certificate chain