[ipxe-devel] [ipxe/ipxe] [crypto/OCSP] parse response certID for validation (#90)

Thilo Fromm notifications at github.com
Mon Feb 18 15:43:28 UTC 2019


I've updated the PR based on a IRC discussion with Michael Brown. While we still parse and extract the hashAlgorithm field, we use memcmp() for the remainder of certID (issuerNameHash, issuerKeyHash, and serialNumber). The memcmp() starts with, and includes, the type identifier for the issuerNameHash field (0x04, for "OCTET STRING").  

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/ipxe/ipxe/pull/90#issuecomment-464781334
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ipxe.org/pipermail/ipxe-devel/attachments/20190218/79de8bd3/attachment.htm>


More information about the ipxe-devel mailing list