]> git.ipfire.org Git - thirdparty/ipxe.git/commit
projects / thirdparty / ipxe.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 2a2d2b9) | patch
[tls] Reject incorrect server names before completing validation
authorMichael Brown <mcb30@ipxe.org>
Wed, 8 Jul 2026 13:44:55 +0000 (14:44 +0100)
committerMichael Brown <mcb30@ipxe.org>
Wed, 8 Jul 2026 13:44:55 +0000 (14:44 +0100)
commit6ba010eaada9c089c92804969f9181d88d7ccc7c
tree26dc2da8ba035bd6197f73863a79b7c156106a21tree | snapshot
parent2a2d2b908054cdaa1db54832e9d18539fdd32668commit | diff
[tls] Reject incorrect server names before completing validation

We currently verify the certificate name only after completing
validation of the certificate chain.  Perform this check instead at
the point of parsing the Certificate record, to create an invariant
that the recorded server certificate always has the correct name (even
if not yet validated).

Signed-off-by: Michael Brown <mcb30@ipxe.org>
src/net/tls.c diff | blob | blame | history
Mirror of https://github.com/ipxe/ipxe.git