aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJack Lloyd <[email protected]>2017-08-07 16:44:39 -0400
committerJack Lloyd <[email protected]>2017-08-07 16:44:39 -0400
commit8d20d0bc49dc0cc71b63a5924f52bba5547024bf (patch)
tree64aedb1c5618380cce6262449d7da44e2261442f
parentc12b1c012d8ec73c7b5c2e3f6ebbed7f572f902a (diff)
parentdd7aa3778a36af3980103e281c89f1fb34fa1624 (diff)
Merge GH #1145 Enable http_util in the module policy files
-rw-r--r--doc/manual/x509.rst4
-rw-r--r--src/build-data/policy/bsi.txt1
-rw-r--r--src/build-data/policy/modern.txt1
-rw-r--r--src/build-data/policy/nist.txt1
4 files changed, 6 insertions, 1 deletions
diff --git a/doc/manual/x509.rst b/doc/manual/x509.rst
index 58ad1d0ca..72a7b32b7 100644
--- a/doc/manual/x509.rst
+++ b/doc/manual/x509.rst
@@ -407,7 +407,9 @@ set of functions in ``x509path.h`` named ``x509_path_validate``:
current system clock's current time. ``ocsp_timeout`` sets the timeout for
OCSP requests. The default of 0 disables OCSP checks alltogether.
``ocsp_resp`` allows adding additional OCSP responses retrieved from outside
- of the path validation.
+ of the path validation. Note that OCSP online checks are done only
+ as long as the http_util module was compiled in. Availability of online
+ OCSP checks can be checked using the macro BOTAN_HAS_ONLINE_REVOCATION_CHECKS.
For the different flavours of ``x509_path_validate``, check ``x509path.h``.
diff --git a/src/build-data/policy/bsi.txt b/src/build-data/policy/bsi.txt
index a97f11438..0f053c337 100644
--- a/src/build-data/policy/bsi.txt
+++ b/src/build-data/policy/bsi.txt
@@ -70,6 +70,7 @@ rdrand_rng
system_rng
# utils
+http_util # needed by x509 for OCSP online checks
locking_allocator
simd
</if_available>
diff --git a/src/build-data/policy/modern.txt b/src/build-data/policy/modern.txt
index ae6eab938..588fc7fc8 100644
--- a/src/build-data/policy/modern.txt
+++ b/src/build-data/policy/modern.txt
@@ -53,6 +53,7 @@ ed25519
clmul
locking_allocator
+http_util # needed by x509 for OCSP online checks
aes_ni
aes_ssse3
diff --git a/src/build-data/policy/nist.txt b/src/build-data/policy/nist.txt
index 5943406e5..50948d4dc 100644
--- a/src/build-data/policy/nist.txt
+++ b/src/build-data/policy/nist.txt
@@ -74,6 +74,7 @@ rdrand_rng
system_rng
# utils
+http_util # needed by x509 for OCSP online checks
locking_allocator
simd
</if_available>