Re: [edk2] [PATCH v2 1/9] OvmfPkg/TlsAuthConfigLib: configure trusted cipher suites for HTTPS boot

2018-04-12 Thread Laszlo Ersek
(comment/question at the end for Ard and Jordan) On 04/12/18 12:17, Gary Lin wrote: > On Thu, Apr 12, 2018 at 11:43:35AM +0200, Laszlo Ersek wrote: >> On 04/12/18 11:10, Gary Lin wrote: >>> On Thu, Apr 12, 2018 at 10:49:15AM +0200, Laszlo Ersek wrote: On 04/12/18 09:08, Gary Lin wrote: >

Re: [edk2] [PATCH v2 1/9] OvmfPkg/TlsAuthConfigLib: configure trusted cipher suites for HTTPS boot

2018-04-12 Thread Gary Lin
On Thu, Apr 12, 2018 at 11:43:35AM +0200, Laszlo Ersek wrote: > On 04/12/18 11:10, Gary Lin wrote: > > On Thu, Apr 12, 2018 at 10:49:15AM +0200, Laszlo Ersek wrote: > >> On 04/12/18 09:08, Gary Lin wrote: > >>> On Wed, Apr 11, 2018 at 12:42:39PM +0200, Laszlo Ersek wrote: > Read the list of

Re: [edk2] [PATCH v2 1/9] OvmfPkg/TlsAuthConfigLib: configure trusted cipher suites for HTTPS boot

2018-04-12 Thread Gary Lin
On Thu, Apr 12, 2018 at 10:49:15AM +0200, Laszlo Ersek wrote: > On 04/12/18 09:08, Gary Lin wrote: > > On Wed, Apr 11, 2018 at 12:42:39PM +0200, Laszlo Ersek wrote: > >> Read the list of trusted cipher suites from fw_cfg and to store it to > >> EFI_TLS_CA_CERTIFICATE_VARIABLE. > >> > >> The fw_cfg

Re: [edk2] [PATCH v2 1/9] OvmfPkg/TlsAuthConfigLib: configure trusted cipher suites for HTTPS boot

2018-04-12 Thread Laszlo Ersek
On 04/12/18 09:08, Gary Lin wrote: > On Wed, Apr 11, 2018 at 12:42:39PM +0200, Laszlo Ersek wrote: >> Read the list of trusted cipher suites from fw_cfg and to store it to >> EFI_TLS_CA_CERTIFICATE_VARIABLE. >> >> The fw_cfg file is formatted by the "update-crypto-policies" utility on >> the host

Re: [edk2] [PATCH v2 1/9] OvmfPkg/TlsAuthConfigLib: configure trusted cipher suites for HTTPS boot

2018-04-12 Thread Gary Lin
On Wed, Apr 11, 2018 at 12:42:39PM +0200, Laszlo Ersek wrote: > Read the list of trusted cipher suites from fw_cfg and to store it to > EFI_TLS_CA_CERTIFICATE_VARIABLE. > > The fw_cfg file is formatted by the "update-crypto-policies" utility on > the host side, so that the host settings take

[edk2] [PATCH v2 1/9] OvmfPkg/TlsAuthConfigLib: configure trusted cipher suites for HTTPS boot

2018-04-11 Thread Laszlo Ersek
Read the list of trusted cipher suites from fw_cfg and to store it to EFI_TLS_CA_CERTIFICATE_VARIABLE. The fw_cfg file is formatted by the "update-crypto-policies" utility on the host side, so that the host settings take effect in guest HTTPS boot as well. QEMU forwards the file intact to the