[crypto] Allow certificates to be marked as having been added explicitly

Allow certificates to be marked as having been added explicitly at run
time.  Such certificates will not be discarded via the certificate
store cache discarder.

Signed-off-by: Michael Brown <mcb30@ipxe.org>
This commit is contained in:
Michael Brown
2016-08-25 15:38:58 +01:00
parent 534eae4d92
commit 9a1a42f283
2 changed files with 23 additions and 4 deletions

View File

@@ -220,6 +220,10 @@ struct x509_certificate {
enum x509_flags {
/** Certificate has been validated */
X509_FL_VALIDATED = 0x0001,
/** Certificate was added at build time */
X509_FL_PERMANENT = 0x0002,
/** Certificate was added explicitly at run time */
X509_FL_EXPLICIT = 0x0004,
};
/**