diff options
| author | René Korthaus <[email protected]> | 2017-08-07 22:09:34 +0200 |
|---|---|---|
| committer | René Korthaus <[email protected]> | 2017-08-07 22:11:54 +0200 |
| commit | dd7aa3778a36af3980103e281c89f1fb34fa1624 (patch) | |
| tree | 64aedb1c5618380cce6262449d7da44e2261442f | |
| parent | c12b1c012d8ec73c7b5c2e3f6ebbed7f572f902a (diff) | |
Add http_util to module policies (GH #1109)
http_util is required by the x509 module to perform
online OCSP checks, which should be defaulted to ON.
Without being part of the policy, it would be disabled.
| -rw-r--r-- | doc/manual/x509.rst | 4 | ||||
| -rw-r--r-- | src/build-data/policy/bsi.txt | 1 | ||||
| -rw-r--r-- | src/build-data/policy/modern.txt | 1 | ||||
| -rw-r--r-- | src/build-data/policy/nist.txt | 1 |
4 files changed, 6 insertions, 1 deletions
diff --git a/doc/manual/x509.rst b/doc/manual/x509.rst index 58ad1d0ca..72a7b32b7 100644 --- a/doc/manual/x509.rst +++ b/doc/manual/x509.rst @@ -407,7 +407,9 @@ set of functions in ``x509path.h`` named ``x509_path_validate``: current system clock's current time. ``ocsp_timeout`` sets the timeout for OCSP requests. The default of 0 disables OCSP checks alltogether. ``ocsp_resp`` allows adding additional OCSP responses retrieved from outside - of the path validation. + of the path validation. Note that OCSP online checks are done only + as long as the http_util module was compiled in. Availability of online + OCSP checks can be checked using the macro BOTAN_HAS_ONLINE_REVOCATION_CHECKS. For the different flavours of ``x509_path_validate``, check ``x509path.h``. diff --git a/src/build-data/policy/bsi.txt b/src/build-data/policy/bsi.txt index a97f11438..0f053c337 100644 --- a/src/build-data/policy/bsi.txt +++ b/src/build-data/policy/bsi.txt @@ -70,6 +70,7 @@ rdrand_rng system_rng # utils +http_util # needed by x509 for OCSP online checks locking_allocator simd </if_available> diff --git a/src/build-data/policy/modern.txt b/src/build-data/policy/modern.txt index ae6eab938..588fc7fc8 100644 --- a/src/build-data/policy/modern.txt +++ b/src/build-data/policy/modern.txt @@ -53,6 +53,7 @@ ed25519 clmul locking_allocator +http_util # needed by x509 for OCSP online checks aes_ni aes_ssse3 diff --git a/src/build-data/policy/nist.txt b/src/build-data/policy/nist.txt index 5943406e5..50948d4dc 100644 --- a/src/build-data/policy/nist.txt +++ b/src/build-data/policy/nist.txt @@ -74,6 +74,7 @@ rdrand_rng system_rng # utils +http_util # needed by x509 for OCSP online checks locking_allocator simd </if_available> |