diff options
| author | Laszlo Ersek <lersek@redhat.com> | 2018-03-22 12:00:55 +0100 |
|---|---|---|
| committer | Laszlo Ersek <lersek@redhat.com> | 2018-03-28 13:07:34 +0200 |
| commit | 0fd13678a6818c1bc241b21f83a3013b17a55a25 (patch) | |
| tree | 9b21e94e6d9e0ce849fdc0395291a2555230c08a /NetworkPkg/HttpDxe/HttpDxe.inf | |
| parent | 78a6782158db2711c3192e46d0cf06f48d28d406 (diff) | |
| download | edk2-0fd13678a6818c1bc241b21f83a3013b17a55a25.tar.gz edk2-0fd13678a6818c1bc241b21f83a3013b17a55a25.tar.bz2 edk2-0fd13678a6818c1bc241b21f83a3013b17a55a25.zip | |
NetworkPkg/HttpDxe: sanity-check the TlsCaCertificate variable before use
In TlsConfigCertificate(), make sure that the set of EFI_SIGNATURE_LIST
objects that the platform stored to "TlsCaCertificate" is well-formed.
In addition, because HttpInstance->TlsConfiguration->SetData() expects
X509 certificates only, ensure that the EFI_SIGNATURE_LIST objects only
report X509 certificates, as described under EFI_CERT_X509_GUID in the
UEFI-2.7 spec.
Cc: Jiaxin Wu <jiaxin.wu@intel.com>
Cc: Siyuan Fu <siyuan.fu@intel.com>
Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=909
Contributed-under: TianoCore Contribution Agreement 1.1
Signed-off-by: Laszlo Ersek <lersek@redhat.com>
Reviewed-by: Fu Siyuan <siyuan.fu@intel.com>
Reviewed-by: Jiaxin Wu <jiaxin.wu@intel.com>
Diffstat (limited to 'NetworkPkg/HttpDxe/HttpDxe.inf')
| -rw-r--r-- | NetworkPkg/HttpDxe/HttpDxe.inf | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/NetworkPkg/HttpDxe/HttpDxe.inf b/NetworkPkg/HttpDxe/HttpDxe.inf index 938e894d9f..6c0688d130 100644 --- a/NetworkPkg/HttpDxe/HttpDxe.inf +++ b/NetworkPkg/HttpDxe/HttpDxe.inf @@ -75,9 +75,10 @@ [Guids]
gEfiTlsCaCertificateGuid ## SOMETIMES_CONSUMES ## Variable:L"TlsCaCertificate"
gEdkiiHttpTlsCipherListGuid ## SOMETIMES_CONSUMES ## Variable:L"HttpTlsCipherList"
+ gEfiCertX509Guid ## SOMETIMES_CONSUMES ## GUID # Check the cert type
[Pcd]
gEfiNetworkPkgTokenSpaceGuid.PcdAllowHttpConnections ## CONSUMES
[UserExtensions.TianoCore."ExtraFiles"]
- HttpDxeExtra.uni
\ No newline at end of file + HttpDxeExtra.uni
|