<div dir="ltr">Thanks Andrew / Sivaraman for the guidance. <div>Definitely good places for me to start.</div><div><br></div><div>Thanks</div><div>Rafael<br><div><br></div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">Em dom., 28 de ago. de 2022 às 08:25, Sivaraman Nainar <<a href="mailto:sivaramann@ami.com">sivaramann@ami.com</a>> escreveu:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="msg2155362440664148975"> <div lang="EN-US" style="overflow-wrap: break-word;"> <div class="gmail-m_2155362440664148975WordSection1"> <p class="MsoNormal">Hello Rafael.<u></u><u></u></p> <p class="MsoNormal"><u></u> <u></u></p> <p class="MsoNormal">HttpBootCheckUriScheme() in HttpBootDxe\HttpBootSupport.c should be the right place to filter the URI.<u></u><u></u></p> <p class="MsoNormal"><u></u> <u></u></p> <p class="MsoNormal">Please give a try.<u></u><u></u></p> <p class="MsoNormal"><u></u> <u></u></p> <p class="MsoNormal">-Siva<u></u><u></u></p> <div> <div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(225,225,225);padding:3pt 0in 0in"> <p class="MsoNormal"><b>From:</b> <a href="mailto:devel@edk2.groups.io" target="_blank">devel@edk2.groups.io</a> <<a href="mailto:devel@edk2.groups.io" target="_blank">devel@edk2.groups.io</a>> <b> On Behalf Of </b>Rafael Machado via <a href="http://groups.io" target="_blank">groups.io</a><br> <b>Sent:</b> Friday, August 26, 2022 7:46 PM<br> <b>To:</b> <a href="mailto:devel@edk2.groups.io" target="_blank">devel@edk2.groups.io</a><br> <b>Subject:</b> [EXTERNAL] [edk2-devel] How to restrict HTTPS boot to a single address<u></u><u></u></p> </div> </div> <p class="MsoNormal"><u></u> <u></u></p> <p class="MsoNormal"> <u></u><u></u></p> <p class="MsoNormal" style="line-height:12pt;background:rgb(224,34,34)"> <strong><span style="font-size:10pt;font-family:Calibri,sans-serif;color:white">**CAUTION:</span></strong><span style="font-size:10pt;color:white"> The e-mail below is from an external source. Please exercise caution before opening attachments, clicking links, or following guidance.** </span><u></u><u></u></p> <div> <div> <p class="MsoNormal">Hello everyone. <u></u><u></u></p> <div> <p class="MsoNormal"><u></u> <u></u></p> </div> <div> <p class="MsoNormal">Quick question for the ones that understand better the HTTPBoot architecture at the edk2 structure.<u></u><u></u></p> </div> <div> <p class="MsoNormal"><u></u> <u></u></p> </div> <div> <p class="MsoNormal">Suppose I have to restrict HTTPS boot to accept only the download of images from a specific url.<u></u><u></u></p> </div> <div> <p class="MsoNormal">For example, instead of allowing the download of images from any valid CA certificate address, I would like to restrict HTTPSBoot to allow only downloads from some specific domain I have.<u></u><u></u></p> </div> <div> <p class="MsoNormal"><u></u> <u></u></p> </div> <div> <p class="MsoNormal">Probably filtering some information, CN or something like that, from the url certificate.<u></u><u></u></p> </div> <div> <p class="MsoNormal"><u></u> <u></u></p> </div> <div> <p class="MsoNormal">What is the best way to do that?<u></u><u></u></p> </div> <div> <p class="MsoNormal">In which driver/library should this logic be added?<u></u><u></u></p> </div> <div> <p class="MsoNormal"><u></u> <u></u></p> </div> <div> <p class="MsoNormal">Thanks<u></u><u></u></p> </div> <div> <p class="MsoNormal">Rafael<u></u><u></u></p> </div> </div> <div> <p class="MsoNormal"></u><u></u></span></p> </div> </div> </div> -The information contained in this message may be confidential and proprietary to American Megatrends (AMI). This communication is intended to be read only by the individual or entity to whom it is addressed or by their designee. If the reader of this message is not the intended recipient, you are on notice that any distribution of this message, in any form, is strictly prohibited. Please promptly notify the sender by reply e-mail or by telephone at 770-246-8600, and then delete or destroy all copies of the transmission. </div> </div></blockquote></div> <div width="1" style="color:white;clear:both">_._,_._,_</div> <hr> Groups.io Links:<p> You receive all messages sent to this group. <p> <a target="_blank" href="https://edk2.groups.io/g/devel/message/92913">View/Reply Online (#92913)</a> | | <a target="_blank" href="https://groups.io/mt/93270616/1813853">Mute This Topic</a> | <a href="https://edk2.groups.io/g/devel/post">New Topic</a><br> <a href="https://edk2.groups.io/g/devel/editsub/1813853">Your Subscription</a> | <a href="mailto:devel+owner@edk2.groups.io">Contact Group Owner</a> | <a href="https://edk2.groups.io/g/devel/unsub">Unsubscribe</a> [edk2-devel-archive@redhat.com]<br> <div width="1" style="color:white;clear:both">_._,_._,_</div>