]> git.proxmox.com Git - mirror_edk2.git/commit
NetworkPkg/HttpDxe: sanity-check the TlsCaCertificate variable before use
authorLaszlo Ersek <lersek@redhat.com>
Thu, 22 Mar 2018 11:00:55 +0000 (12:00 +0100)
committerLaszlo Ersek <lersek@redhat.com>
Wed, 28 Mar 2018 11:07:34 +0000 (13:07 +0200)
commit0fd13678a6818c1bc241b21f83a3013b17a55a25
tree9b21e94e6d9e0ce849fdc0395291a2555230c08a
parent78a6782158db2711c3192e46d0cf06f48d28d406
NetworkPkg/HttpDxe: sanity-check the TlsCaCertificate variable before use

In TlsConfigCertificate(), make sure that the set of EFI_SIGNATURE_LIST
objects that the platform stored to "TlsCaCertificate" is well-formed.

In addition, because HttpInstance->TlsConfiguration->SetData() expects
X509 certificates only, ensure that the EFI_SIGNATURE_LIST objects only
report X509 certificates, as described under EFI_CERT_X509_GUID in the
UEFI-2.7 spec.

Cc: Jiaxin Wu <jiaxin.wu@intel.com>
Cc: Siyuan Fu <siyuan.fu@intel.com>
Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=909
Contributed-under: TianoCore Contribution Agreement 1.1
Signed-off-by: Laszlo Ersek <lersek@redhat.com>
Reviewed-by: Fu Siyuan <siyuan.fu@intel.com>
Reviewed-by: Jiaxin Wu <jiaxin.wu@intel.com>
NetworkPkg/HttpDxe/HttpDxe.inf
NetworkPkg/HttpDxe/HttpsSupport.c