mirror of
https://github.com/xcat2/xNBA.git
synced 2026-06-16 16:41:01 +00:00
Jarrod Johnson
d1ad215231
From 9f2bbf20533a6c006820c5b03be6f3a93e8b3e99 Mon Sep 17 00:00:00 2001 From: Alexander Chernyakhovsky <achernya@google.com> Date: Tue, 15 Oct 2013 16:03:11 -0400 Subject: [PATCH 4/4] Handle OCSP responses that don't provide certificates Certificate authorities are not required to send the certificate used to sign the OCSP response under some scenarios, namely in the case when the certificate is the same as the one that did the original issue. The iPXE code previously assumed that such cases did not exist, and valid OCSP responses were dropped. Change these semantics by attempting to validate with the original issuer if no specific signing certificate was provided. --- src/crypto/ocsp.c | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-)
iPXE README File Quick start guide: cd src make For any more detailed instructions, see http://ipxe.org