[ipxe-devel] login screen and digest

[Michael Brown]

On Tuesday 11 Jun 2013 22:58:25 Patrick Rombouts wrote:
> I've been building a few simple applications with it, and for my newest
> brainfart i'd like to use the inbuilt login screen in iPXE. I can use it,
> and the parameters are being written to the username and password value
> fine. I'd like to send this to an http server, as i cannot get iPXE to work
> with my https server. The main issue is that i don't see a way currently to
> hash this password, and i don't rather send it over the internet in plain
> text. Is there a way to apply a sauce of md5 or sha1 with a seed over it so
> it won't go over the network in plain text?

iPXE supports HTTP Digest authentication.  You need to configure this on the 
server side; the server needs to require it from the client.  If you're using 
Apache, then look at "AuthType Digest" and the "require user" directive.

Out of interest, what problems are you having with HTTPS?

Michael