Michael Brown bd16deaa87 [crypto] Do not allow build-time cryptography settings to be overridden ...

If a root certificate has been explicitly specified at build time
using TRUST=/path/to/cert then do not allow this to be overridden even
from a trustworthy settings source (such as VMware GuestInfo).

Similarly, if a client certificate (and private key) has been
explicitly specified at build time, then do not allow it to be
overridden at runtime.

Signed-off-by: Michael Brown <mcb30@ipxe.org>

2012-04-24 16:28:15 +01:00

..

axtls

[crypto] Remove obsolete AXTLS RSA algorithm

2012-03-18 14:47:16 +00:00

aes_wrap.c

[crypto] Fix wrong setup in function aes_wrap

2012-04-10 13:14:15 +01:00

arc4.c

[build] Rename gPXE to iPXE

2010-04-19 23:43:39 +01:00

asn1.c

[crypto] Avoid an error when asn1_shrink() is already at end of object

2012-03-22 02:28:49 +00:00

axtls_aes.c

[crypto] Upgrade AES and RSA code to upstream axTLS version 1.4.5

2012-03-09 17:14:39 +00:00

bigint.c

[crypto] Force caller to provide temporary storage for modular calculations

2012-03-18 20:22:43 +00:00

cbc.c

[build] Rename gPXE to iPXE

2010-04-19 23:43:39 +01:00

chap.c

[build] Rename gPXE to iPXE

2010-04-19 23:43:39 +01:00

clientcert.c

[crypto] Do not allow build-time cryptography settings to be overridden

2012-04-24 16:28:15 +01:00

cms.c

[crypto] Disambiguate all CMS errors

2012-03-26 23:34:49 +01:00

crc32.c

[build] Rename gPXE to iPXE

2010-04-19 23:43:39 +01:00

crypto_null.c

[crypto] Add abstraction for a public-key algorithm

2012-03-18 13:35:32 +00:00

drbg.c

[rng] Fix build error when assertions are enabled

2012-03-18 12:26:33 +00:00

entropy.c

[rng] Allow entropy_enable() to return an error

2012-03-18 17:05:37 +00:00

hash_df.c

[rng] Allow hash_df() to accept multiple underlying hash algorithms

2012-03-05 23:23:45 +00:00

hmac_drbg.c

[rng] Allow HMAC_DRBG to use multiple underlying hash algorithms

2012-03-06 13:12:30 +00:00

hmac.c

[build] Rename gPXE to iPXE

2010-04-19 23:43:39 +01:00

md5.c

[crypto] Define ASN.1 OID-identified algorithms for all supported digests

2012-03-22 00:31:22 +00:00

null_entropy.c

[rng] Add ANS X9.82 Approved Source of Entropy Input

2012-02-21 12:42:38 +00:00

random_nz.c

[rng] Add get_random_nz() function required by RSA algorithm

2012-02-21 12:42:54 +00:00

rbg.c

[rng] Add ANS X9.82 RBG wrapper functions

2012-02-21 12:42:46 +00:00

rootcert.c

[crypto] Do not allow build-time cryptography settings to be overridden

2012-04-24 16:28:15 +01:00

rsa.c

[crypto] Add an explicit "RSA signature incorrect" error message

2012-03-27 14:58:45 +01:00

sha1.c

[crypto] Define ASN.1 OID-identified algorithms for all supported digests

2012-03-22 00:31:22 +00:00

sha1extra.c

[802.11] Eliminate use of AXTLS-specific SHA1_SIZE constant

2012-03-04 15:29:24 +00:00

sha256.c

[crypto] Define ASN.1 OID-identified algorithms for all supported digests

2012-03-22 00:31:22 +00:00

x509.c

[crypto] Parse X.509 extended key usage extension

2012-03-22 11:41:22 +00:00