[ipxe-devel] Proposed patch: support for SSL subjectAlternativeName certificates, two other useful features

[Alex Chernyakhovsky]

Hi Ken,

You're correct, looks like I typo'd something while preparing the patches.
Here's an updated copy of the patchset. I've also found an issue in the
OCSP code while doing this testing, a patch likely forthcoming.

Sincerely,
-Alex



On Tue, Oct 15, 2013 at 2:13 PM, Ken Simon <ninkendo at gmail.com> wrote:

> Alex,
>
> I think there's a typo in your implementation of dns_wildcard_matcher:
>
> + const char* first_dot = strchr (dns, '*') ;
>
> you probably want:
>
> + const char* first_dot = strchr (dns, '.') ;
>
> Fixing the patch in that way I was able to get wildcard certificates
> to work with iPXE.
>
> --
> Ken
> _______________________________________________
> ipxe-devel mailing list
> ipxe-devel at lists.ipxe.org
> https://lists.ipxe.org/mailman/listinfo.cgi/ipxe-devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ipxe.org/pipermail/ipxe-devel/attachments/20131015/69bd955c/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Implement-subject-alt-name-and-wildcard-certificates.patch
Type: text/x-patch
Size: 6893 bytes
Desc: not available
URL: <http://lists.ipxe.org/pipermail/ipxe-devel/attachments/20131015/69bd955c/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-Implement-the-base64-setting-type.patch
Type: text/x-patch
Size: 1531 bytes
Desc: not available
URL: <http://lists.ipxe.org/pipermail/ipxe-devel/attachments/20131015/69bd955c/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0003-Implement-tokset.patch
Type: text/x-patch
Size: 2586 bytes
Desc: not available
URL: <http://lists.ipxe.org/pipermail/ipxe-devel/attachments/20131015/69bd955c/attachment-0002.bin>