aboutsummaryrefslogtreecommitdiff
path: root/src/include/ipxe
diff options
context:
space:
mode:
authorMichael Brown <mcb30@ipxe.org>2012-05-14 14:09:52 +0100
committerMichael Brown <mcb30@ipxe.org>2012-05-14 18:09:40 +0100
commite01af7367dfb14a76767c7bfb8763e5a705822c1 (patch)
tree7098c9f16b61b319593f9d4eaabc6977302fa53b /src/include/ipxe
parent4aad46ac70933458f118f59506044de35eb9f7cf (diff)
downloadipxe-e01af7367dfb14a76767c7bfb8763e5a705822c1.zip
ipxe-e01af7367dfb14a76767c7bfb8763e5a705822c1.tar.gz
ipxe-e01af7367dfb14a76767c7bfb8763e5a705822c1.tar.bz2
[crypto] Parse OCSPSigning key purpose, if present
Signed-off-by: Michael Brown <mcb30@ipxe.org>
Diffstat (limited to 'src/include/ipxe')
-rw-r--r--src/include/ipxe/asn1.h7
-rw-r--r--src/include/ipxe/x509.h1
2 files changed, 8 insertions, 0 deletions
diff --git a/src/include/ipxe/asn1.h b/src/include/ipxe/asn1.h
index 222e32e..cd5c330 100644
--- a/src/include/ipxe/asn1.h
+++ b/src/include/ipxe/asn1.h
@@ -176,6 +176,13 @@ struct asn1_cursor {
ASN1_OID_SINGLE ( 5 ), ASN1_OID_SINGLE ( 7 ), \
ASN1_OID_SINGLE ( 48 ), ASN1_OID_SINGLE ( 1 )
+/** ASN.1 OID for id-kp-OCSPSigning (1.3.6.1.5.5.7.3.9) */
+#define ASN1_OID_OCSPSIGNING \
+ ASN1_OID_INITIAL ( 1, 3 ), ASN1_OID_SINGLE ( 6 ), \
+ ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 5 ), \
+ ASN1_OID_SINGLE ( 5 ), ASN1_OID_SINGLE ( 7 ), \
+ ASN1_OID_SINGLE ( 3 ), ASN1_OID_SINGLE ( 9 )
+
/** Define an ASN.1 cursor containing an OID */
#define ASN1_OID_CURSOR( oid_value ) { \
.data = oid_value, \
diff --git a/src/include/ipxe/x509.h b/src/include/ipxe/x509.h
index 8b1dda2..6dc31b4 100644
--- a/src/include/ipxe/x509.h
+++ b/src/include/ipxe/x509.h
@@ -119,6 +119,7 @@ struct x509_extended_key_usage {
*/
enum x509_extended_key_usage_bits {
X509_CODE_SIGNING = 0x0001,
+ X509_OCSP_SIGNING = 0x0002,
};
/** X.509 certificate OCSP responder */