<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div>Rafael,</div><div><br></div><div>I’m not sure this matches exactly what you are looking for, but the OVMF (Virtual Machine) has some configuration options around HTTPS boot [1]. That might be a good place to start. </div><div><br></div>[1] <a href="https://github.com/tianocore/edk2/blob/master/OvmfPkg/README#L232">https://github.com/tianocore/edk2/blob/master/OvmfPkg/README#L232</a><div><br></div><div>Thanks,</div><div><br></div><div>Andrew Fish<br><div><br><blockquote type="cite"><div>On Aug 26, 2022, at 7:15 AM, Rafael Machado <rafaelrodrigues.machado@gmail.com> wrote:</div><br class="Apple-interchange-newline"><div><div dir="ltr">Hello everyone.<div><br></div><div>Quick question for the ones that understand better the HTTPBoot architecture at the edk2 structure.</div><div><br></div><div>Suppose I have to restrict HTTPS boot to accept only the download of images from a specific url.</div><div>For example, instead of allowing the download of images from any valid CA certificate address, I would like to restrict HTTPSBoot to allow only downloads from some specific domain I have.</div><div><br></div><div>Probably filtering some information, CN or something like that, from the url certificate.</div><div><br></div><div>What is the best way to do that?</div><div>In which driver/library should this logic be added?</div><div><br></div><div>Thanks</div><div>Rafael</div></div>
</div></blockquote></div><br></div></body></html>
<div width="1" style="color:white;clear:both">_._,_._,_</div> <hr> Groups.io Links:<p> You receive all messages sent to this group. <p> <a target="_blank" href="https://edk2.groups.io/g/devel/message/92869">View/Reply Online (#92869)</a> | | <a target="_blank" href="https://groups.io/mt/93270616/1813853">Mute This Topic</a> | <a href="https://edk2.groups.io/g/devel/post">New Topic</a><br> <a href="https://edk2.groups.io/g/devel/editsub/1813853">Your Subscription</a> | <a href="mailto:devel+owner@edk2.groups.io">Contact Group Owner</a> | <a href="https://edk2.groups.io/g/devel/unsub">Unsubscribe</a> [edk2-devel-archive@redhat.com]<br> <div width="1" style="color:white;clear:both">_._,_._,_</div>