diff options
author | Jack Lloyd <[email protected]> | 2017-08-07 16:44:39 -0400 |
---|---|---|
committer | Jack Lloyd <[email protected]> | 2017-08-07 16:44:39 -0400 |
commit | 8d20d0bc49dc0cc71b63a5924f52bba5547024bf (patch) | |
tree | 64aedb1c5618380cce6262449d7da44e2261442f | |
parent | c12b1c012d8ec73c7b5c2e3f6ebbed7f572f902a (diff) | |
parent | dd7aa3778a36af3980103e281c89f1fb34fa1624 (diff) |
Merge GH #1145 Enable http_util in the module policy files
-rw-r--r-- | doc/manual/x509.rst | 4 | ||||
-rw-r--r-- | src/build-data/policy/bsi.txt | 1 | ||||
-rw-r--r-- | src/build-data/policy/modern.txt | 1 | ||||
-rw-r--r-- | src/build-data/policy/nist.txt | 1 |
4 files changed, 6 insertions, 1 deletions
diff --git a/doc/manual/x509.rst b/doc/manual/x509.rst index 58ad1d0ca..72a7b32b7 100644 --- a/doc/manual/x509.rst +++ b/doc/manual/x509.rst @@ -407,7 +407,9 @@ set of functions in ``x509path.h`` named ``x509_path_validate``: current system clock's current time. ``ocsp_timeout`` sets the timeout for OCSP requests. The default of 0 disables OCSP checks alltogether. ``ocsp_resp`` allows adding additional OCSP responses retrieved from outside - of the path validation. + of the path validation. Note that OCSP online checks are done only + as long as the http_util module was compiled in. Availability of online + OCSP checks can be checked using the macro BOTAN_HAS_ONLINE_REVOCATION_CHECKS. For the different flavours of ``x509_path_validate``, check ``x509path.h``. diff --git a/src/build-data/policy/bsi.txt b/src/build-data/policy/bsi.txt index a97f11438..0f053c337 100644 --- a/src/build-data/policy/bsi.txt +++ b/src/build-data/policy/bsi.txt @@ -70,6 +70,7 @@ rdrand_rng system_rng # utils +http_util # needed by x509 for OCSP online checks locking_allocator simd </if_available> diff --git a/src/build-data/policy/modern.txt b/src/build-data/policy/modern.txt index ae6eab938..588fc7fc8 100644 --- a/src/build-data/policy/modern.txt +++ b/src/build-data/policy/modern.txt @@ -53,6 +53,7 @@ ed25519 clmul locking_allocator +http_util # needed by x509 for OCSP online checks aes_ni aes_ssse3 diff --git a/src/build-data/policy/nist.txt b/src/build-data/policy/nist.txt index 5943406e5..50948d4dc 100644 --- a/src/build-data/policy/nist.txt +++ b/src/build-data/policy/nist.txt @@ -74,6 +74,7 @@ rdrand_rng system_rng # utils +http_util # needed by x509 for OCSP online checks locking_allocator simd </if_available> |