[ipxe-devel] Proposed patch: support for SSL subjectAlternativeName certificates, two other useful features

[Jarrod Johnson]

I'll probably be testing at least the first patch on Monday (I recently
found myself in need of this precise function).  If it pans out, would you
mind me adding it to at least my 'xcat' vendor repository of ipxe?

I don't yet find myself in need of the other two patches, so I don't have
much to comment on them.



On Wed, Oct 2, 2013 at 5:24 PM, Alex Chernyakhovsky <achernya at google.com>wrote:

> Hi iPXE devel,
>
> Please find attached 3 patches that I think are extremely useful. They
> implement the following:
>
> 1. subjectAlternativeName support (and wildcard support) for SSL
> certificates. This allows iPXE to validate certificates that have more than
> one name, as many certs issued these days have sAN fields.
> 2. Allow setting/reading variables in base64.
> 3. Implement a "tokset" command that allows tokenizing and setting
> variables.
>
> Of these, the tokset patch is still rough, so I'd appreciate comments on
> how to improve it.
>
> Sincerely,
> -Alex
>
>
> _______________________________________________
> ipxe-devel mailing list
> ipxe-devel at lists.ipxe.org
> https://lists.ipxe.org/mailman/listinfo.cgi/ipxe-devel
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ipxe.org/pipermail/ipxe-devel/attachments/20131005/e3c9b1cc/attachment.htm>