[ipxe-devel] iPXE CERTSTORE: X509 0xb09e0 could not parse signature algorithm: Operation not supported

Michael Brown mcb30 at ipxe.org
Mon Mar 11 12:06:50 UTC 2019


On 06/03/2019 18:38, Mike Sollanych wrote:
> X509 0xb09e0 could not parse signature algorithm: Operation not supported
> 
> and a link to http://ipxe.org/err/3c00e1 which unfortunately doesn't 
> help me much.
> 
> It's worth noting that this process worked perfectly with the previous 
> cert, so it's definitely the algorithm. For the CA cert, when I run 
> `openssl x509`, I see:
> 
> Signature Algorithm: ecdsa-with-SHA512

iPXE has support for SHA-512 but not for ECDSA.  Are you able to use 
rsa-with-sha512 instead?

Michael



More information about the ipxe-devel mailing list