Michael Brown cb29cd4298 [crypto] Report meaningful error when certificate chain validation fails ...

If a certificate chain contains no certificate which can be validated
as a standalone certificate (i.e. contains no trusted root
certificates or previously-validated certificates) then iPXE will
currently return a fixed error EACCES_UNTRUSTED.  This masks the
actual errors obtained when attempting to validate each certificate as
a standalone certificate, and so makes troubleshooting difficult for
the end user.

Fix by instead returning the error obtained when attempting to
validate the final certificate in the chain as a standalone
certificate.  This error is most likely (though not guaranteed) to
represent the "real" problem.

Reported-by: Sven Dreyer <sven@dreyer-net.de>
Signed-off-by: Michael Brown <mcb30@ipxe.org>

2013-05-10 10:03:56 +01:00

..

arch

[settings] Eliminate settings "tag magic"

2013-05-01 19:52:12 +01:00

bin

Rename .cvsignore files to .gitignore

2007-06-09 22:57:00 +01:00

config

[efi] Enable "cpuid" command by default for EFI

2013-03-22 13:58:54 +00:00

core

[settings] Eliminate settings "tag magic"

2013-05-01 19:52:12 +01:00

crypto

[crypto] Report meaningful error when certificate chain validation fails

2013-05-10 10:03:56 +01:00

doc

[build] Rename gPXE to iPXE

2010-04-19 23:43:39 +01:00

drivers

[settings] Eliminate settings "tag magic"

2013-05-01 19:52:12 +01:00

hci

[build] Fix uses of literal 0 as a NULL pointer

2013-04-28 17:13:44 +01:00

image

[efi] Add sample platform-generated error disambiguations

2013-04-19 13:34:19 +01:00

include

[smbios] Allow access to multiple instances of SMBIOS structures

2013-05-01 22:11:04 +01:00

interface

[smbios] Allow access to multiple instances of SMBIOS structures

2013-05-01 22:11:04 +01:00

libgcc

[build] Mark __intel_new_proc_init with __libgcc rather than cdecl

2009-08-03 15:56:10 +01:00

net

[settings] Eliminate settings "tag magic"

2013-05-01 19:52:12 +01:00

tests

[test] Add self-tests for string functions

2012-11-12 16:58:49 +00:00

usr

[autoboot] Split main control flow out of main() into a new function ipxe()

2013-03-13 22:24:13 +00:00

util

[libc] Redefine low 8 bits of error code as "platform error code"

2013-04-19 13:34:13 +01:00

.gitignore

[build] Add support for local configuration files

2010-03-26 19:07:22 +00:00

doxygen.cfg

[build] Remove PACKED macro

2010-05-29 23:49:47 +01:00

Makefile

[build] Add vmware build target

2013-03-06 19:52:51 +00:00

Makefile.housekeeping

[build] Use -Wno-decl when running sparse

2013-04-28 16:43:32 +01:00