Google Git
Sign in
qemu/ipxe/6ba010eaada9c089c92804969f9181d88d7ccc7c
commit
6ba010eaada9c089c92804969f9181d88d7ccc7c
[log]
author
Michael Brown <mcb30@ipxe.org>
Wed Jul 08 14:44:55 2026 +0100
committer
Michael Brown <mcb30@ipxe.org>
Wed Jul 08 14:44:55 2026 +0100
tree
26dc2da8ba035bd6197f73863a79b7c156106a21
parent
2a2d2b908054cdaa1db54832e9d18539fdd32668 [diff]
[tls] Reject incorrect server names before completing validation

We currently verify the certificate name only after completing
validation of the certificate chain.  Perform this check instead at
the point of parsing the Certificate record, to create an invariant
that the recorded server certificate always has the correct name (even
if not yet validated).

Signed-off-by: Michael Brown <mcb30@ipxe.org>
1 file changed
tree: 26dc2da8ba035bd6197f73863a79b7c156106a21
  1. .github/
  2. contrib/
  3. src/
  4. CHANGELOG.md
  5. CONTRIBUTING.md
  6. COPYING
  7. COPYING.GPLv2
  8. COPYING.UBDL
  9. README.md
  10. RELEASE.md
  11. RELNOTES.tmpl.md
README.md

iPXE network bootloader

Build Coverity Release

iPXE is the leading open source network boot firmware. It provides a full PXE implementation enhanced with additional features such as:

  • boot from a web server via HTTP or HTTPS,

  • boot from an iSCSI, FCoE, or AoE SAN,

  • control the boot process with a script,

  • create interactive forms and menus.

You can use iPXE to replace the existing PXE ROM on your network card, or you can chainload into iPXE to obtain the features of iPXE without the hassle of reflashing.

iPXE is free, open-source software licensed under the GNU GPL (with some portions under GPL-compatible licences).

You can download the rolling release binaries (built from the latest commit), or use the most recent stable release.

For full documentation, visit the iPXE website.