From: Abner Chang <abner.ch...@amd.com> For the HTTPS connetion that doesn't require TLS peer verification, EDKII_HTTPS_TLS_PLATFORM_POLICY_PROTOCOL is introduced to platform developer to provide the TLS configure data that is different than the default TLS configuration. The use case such as Redfish service connction which doesn't require the TLS peer verification on the cetificate, especially to the Redfish service connection through the in-band network interface.
Platform developer can provide this protoocl to EFI HTTP driver to configure TLS using TLS conifg data provided by EDKII_HTTPS_TLS_PLATFORM_POLICY_PROTOCOL for the specific HTTP protocol handle. How to distinguish the correct HTTP protocol handle for the platform TLS policy is outside the scope of this change. For Redfish, we will provide this protocol in EFI Redfish REST EX driver. Question: Do we need the version control of platform TLS configuration data structure for the flexibility in future? Signed-off-by: Abner Chang <abner.ch...@amd.com> Cc: Saloni Kasbekar <saloni.kasbe...@intel.com> Cc: Zachary Clark-williams <zachary.clark-willi...@intel.com> Cc: Michael Brown <mc...@ipxe.org> Cc: Nickle Wang <nick...@nvidia.com> Cc: Igor Kulchytskyy <ig...@ami.com> Abenr Chang (1): NetworkPkg: Check platform TLS policy Abner Chang (1): NetworkPkg: EDKII HTTPS platform TLS policy NetworkPkg/NetworkPkg.dec | 3 + NetworkPkg/HttpDxe/HttpDxe.inf | 1 + NetworkPkg/HttpDxe/HttpDriver.h | 1 + .../Protocol/HttpsTlsPlatformPolicyProtocol.h | 72 +++++++++++ NetworkPkg/HttpDxe/HttpsSupport.c | 117 ++++++++++++++++-- 5 files changed, 182 insertions(+), 12 deletions(-) create mode 100644 NetworkPkg/Include/Protocol/HttpsTlsPlatformPolicyProtocol.h -- 2.37.1.windows.1 -=-=-=-=-=-=-=-=-=-=-=- Groups.io Links: You receive all messages sent to this group. View/Reply Online (#112912): https://edk2.groups.io/g/devel/message/112912 Mute This Topic: https://groups.io/mt/103368438/21656 Group Owner: devel+ow...@edk2.groups.io Unsubscribe: https://edk2.groups.io/g/devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
