mirror of
https://github.com/ipxe/ipxe
synced 2026-01-01 00:07:27 +03:00
[crypto] Parse OCSPSigning key purpose, if present
Signed-off-by: Michael Brown <mcb30@ipxe.org>
This commit is contained in:
@@ -518,6 +518,9 @@ static int x509_parse_key_usage ( struct x509_certificate *cert,
|
||||
/** "id-kp-codeSigning" object identifier */
|
||||
static uint8_t oid_code_signing[] = { ASN1_OID_CODESIGNING };
|
||||
|
||||
/** "id-kp-OCSPSigning" object identifier */
|
||||
static uint8_t oid_ocsp_signing[] = { ASN1_OID_OCSPSIGNING };
|
||||
|
||||
/** Supported key purposes */
|
||||
static struct x509_key_purpose x509_key_purposes[] = {
|
||||
{
|
||||
@@ -525,6 +528,11 @@ static struct x509_key_purpose x509_key_purposes[] = {
|
||||
.bits = X509_CODE_SIGNING,
|
||||
.oid = ASN1_OID_CURSOR ( oid_code_signing ),
|
||||
},
|
||||
{
|
||||
.name = "ocspSigning",
|
||||
.bits = X509_OCSP_SIGNING,
|
||||
.oid = ASN1_OID_CURSOR ( oid_ocsp_signing ),
|
||||
},
|
||||
};
|
||||
|
||||
/**
|
||||
|
||||
Reference in New Issue
Block a user