Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

certmule discovery doesn't work when network booting #482

Open
vathpela opened this issue May 25, 2022 · 1 comment
Open

certmule discovery doesn't work when network booting #482

vathpela opened this issue May 25, 2022 · 1 comment

Comments

@vathpela
Copy link
Contributor

vathpela commented May 25, 2022

In 35d7378, we add a method of discovering wrapped certificates to import for validation, but it relies on opening a directory and doing efi_status = dir->Read(dir, &buffersize, buffer);. This doesn't work when booting from TFTP, HTTP, or HTTPS, because they don't present directories in a structured way.

We need a different discovery method that takes that into account. The typical way we do this is to have a template like "cert####.efi", and we iterate our load directory looking for cert0000.efi, cert0001.efi, through certffff.efi until we get an error.

@jsetje
Copy link
Collaborator

jsetje commented May 25, 2022

Since those files contain an ESL, there really is no need to support this many, at least if this is a special case for transports that don't support readdir.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants