Root certificate store. More...

#include <ipxe/x509.h>

Functions
	FILE_LICENCE (GPL2_OR_LATER_OR_UBDL)
	FILE_SECBOOT (PERMITTED)

Variables
const int	allow_trust_override
	Flag indicating if root of trust may be overridden at runtime.
struct x509_root	root_certificates
	Root certificates.

Detailed Description

Root certificate store.

Definition in file rootcert.h.

Function Documentation

◆ FILE_LICENCE()

FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL )

◆ FILE_SECBOOT()

FILE_SECBOOT ( PERMITTED )

References allow_trust_override, and root_certificates.

Variable Documentation

◆ allow_trust_override

const int allow_trust_override

extern

Flag indicating if root of trust may be overridden at runtime.

Definition at line 65 of file rootcert.c.

Referenced by efi_cacert(), and FILE_SECBOOT().

◆ root_certificates

struct x509_root root_certificates

extern

Root certificates.

Definition at line 79 of file rootcert.c.

                                     {
        .refcnt = REF_INIT ( ref_no_free ),
        .digest = &sha256_algorithm,
        .count = ( sizeof ( fingerprints ) / FINGERPRINT_LEN ),
        .fingerprints = fingerprints,
};

Referenced by add_tls(), efi_cacert(), FILE_SECBOOT(), ocsp_prepare_test(), rootcert_init(), x509_is_valid(), and x509_validate().

Functions