sysadmin/ipxe
1
0
Fork 0
mirror of https://github.com/ipxe/ipxe synced 2025-12-20 12:00:19 +03:00
Code Issues Packages Projects Releases Wiki Activity

[ocsp] Allow OCSP checks to be disabled

Browse Source 
Some CAs provide non-functional OCSP servers, and some clients are
forced to operate on networks without access to the OCSP servers.
Allow the user to explicitly disable the use of OCSP checks by
undefining OCSP_CHECK in config/crypto.h.

Signed-off-by: Michael Brown <mcb30@ipxe.org>
This commit is contained in:
Michael Brown
2018-03-18 22:27:49 +02:00
parent a0021a30dd
commit 9759860ec0
2 changed files with 20 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
src/config/crypto.h
View File

@@ -58,6 +58,14 @@ FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
*/
#define CROSSCERT "http://ca.ipxe.org/auto"
/** Perform OCSP checks when applicable
*
* Some CAs provide non-functional OCSP servers, and some clients are
* forced to operate on networks without access to the OCSP servers.
* Allow the user to explicitly disable the use of OCSP checks.
*/
#define OCSP_CHECK
#include <config/named.h>
#include NAMED_CONFIG(crypto.h)
#include <config/local/crypto.h>