audk/NetworkPkg/HttpDxe
Laszlo Ersek 0fd13678a6 NetworkPkg/HttpDxe: sanity-check the TlsCaCertificate variable before use
In TlsConfigCertificate(), make sure that the set of EFI_SIGNATURE_LIST
objects that the platform stored to "TlsCaCertificate" is well-formed.

In addition, because HttpInstance->TlsConfiguration->SetData() expects
X509 certificates only, ensure that the EFI_SIGNATURE_LIST objects only
report X509 certificates, as described under EFI_CERT_X509_GUID in the
UEFI-2.7 spec.

Cc: Jiaxin Wu <jiaxin.wu@intel.com>
Cc: Siyuan Fu <siyuan.fu@intel.com>
Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=909
Contributed-under: TianoCore Contribution Agreement 1.1
Signed-off-by: Laszlo Ersek <lersek@redhat.com>
Reviewed-by: Fu Siyuan <siyuan.fu@intel.com>
Reviewed-by: Jiaxin Wu <jiaxin.wu@intel.com>
2018-03-28 13:07:34 +02:00
..
ComponentName.c
ComponentName.h
HttpDns.c NetworkPkg: Fix protocol handler service in HttpDxe. 2017-01-23 15:19:05 +08:00
HttpDns.h
HttpDriver.c NetworkPkg: Fix protocol handler service in HttpDxe. 2017-01-23 15:19:05 +08:00
HttpDriver.h NetworkPkg: Read HttpTlsCipherList variable and configure it for HTTPS session. 2018-02-14 07:31:49 +08:00
HttpDxe.inf NetworkPkg/HttpDxe: sanity-check the TlsCaCertificate variable before use 2018-03-28 13:07:34 +02:00
HttpDxe.uni NetworkPkg: Convert all .uni files to utf-8 2015-12-15 04:56:57 +00:00
HttpDxeExtra.uni NetworkPkg: Convert all .uni files to utf-8 2015-12-15 04:56:57 +00:00
HttpImpl.c NetworkPkg/HttpDxe: Support HTTP Delete Method. 2018-03-02 11:15:54 +08:00
HttpImpl.h NetworkPkg/HttpDxe: Clarify the usage of HttpConfigData in HTTP protocol 2017-09-29 09:02:08 +08:00
HttpProto.c NetworkPkg/HttpDxe: Handle the large data request via HTTPS channel. 2018-03-22 08:25:02 +08:00
HttpProto.h NetworkPkg/HttpDxe: Destroy the TLS instance when cleaning up the HTTP child 2017-08-02 15:31:54 +08:00
HttpsSupport.c NetworkPkg/HttpDxe: sanity-check the TlsCaCertificate variable before use 2018-03-28 13:07:34 +02:00
HttpsSupport.h NetworkPkg/HttpDxe: Handle the large data request via HTTPS channel. 2018-03-22 08:25:02 +08:00