diff options
| author | Laszlo Ersek <lersek@redhat.com> | 2018-03-22 12:00:55 +0100 |
|---|---|---|
| committer | Laszlo Ersek <lersek@redhat.com> | 2018-03-28 13:07:34 +0200 |
| commit | 0fd13678a6818c1bc241b21f83a3013b17a55a25 (patch) | |
| tree | 9b21e94e6d9e0ce849fdc0395291a2555230c08a /NetworkPkg/TlsAuthConfigDxe | |
| parent | 78a6782158db2711c3192e46d0cf06f48d28d406 (diff) | |
| download | edk2-0fd13678a6818c1bc241b21f83a3013b17a55a25.tar.gz edk2-0fd13678a6818c1bc241b21f83a3013b17a55a25.tar.bz2 edk2-0fd13678a6818c1bc241b21f83a3013b17a55a25.zip | |
NetworkPkg/HttpDxe: sanity-check the TlsCaCertificate variable before use
In TlsConfigCertificate(), make sure that the set of EFI_SIGNATURE_LIST
objects that the platform stored to "TlsCaCertificate" is well-formed.
In addition, because HttpInstance->TlsConfiguration->SetData() expects
X509 certificates only, ensure that the EFI_SIGNATURE_LIST objects only
report X509 certificates, as described under EFI_CERT_X509_GUID in the
UEFI-2.7 spec.
Cc: Jiaxin Wu <jiaxin.wu@intel.com>
Cc: Siyuan Fu <siyuan.fu@intel.com>
Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=909
Contributed-under: TianoCore Contribution Agreement 1.1
Signed-off-by: Laszlo Ersek <lersek@redhat.com>
Reviewed-by: Fu Siyuan <siyuan.fu@intel.com>
Reviewed-by: Jiaxin Wu <jiaxin.wu@intel.com>
Diffstat (limited to 'NetworkPkg/TlsAuthConfigDxe')
0 files changed, 0 insertions, 0 deletions