[ipxe-devel] https does not work - but only on a single system

[Sven Dreyer]

Hi Michael,

Am 09.05.2013 13:28, schrieb Michael Brown:
> If it wasn't a typo, then I'd be interested in the DEBUG=x509 output to work
> out why the wrong error was being reported.

It wasn't a typo, I copied the serial console's output. Find below the 
full output.

Thanks,
Sven


<snip>
Intel UNDI, PXE-2.0 (build 082)
Copyright (C) 1997,1998,1999  Intel Corporation
VIA Rhine III Management Adapter v2.43 (2005/12/15)

CLIENT MAC ADDR: 00 0D B9 13 43 04
CLIENT IP: 10.1.1.2  MASK: 255.255.255.0  DHCP IP: 10.1.1.1 

GATEWAY IP: 10.1.1.1
PXE->EB: !PXE at 9E2E:0070, entry point at 9E2E:0106 

          UNDI code segment 9E2E:1966, data segment 94BD:9710 (594-640kB)
          UNDI device is PCI 00:09.0, type DIX+802.3
          594kB free base memory after PXE unload
iPXE initialising devices...ok



iPXE 1.0.0+ (8bc2) -- Open Source Network Boot Firmware -- http://ipxe.org
Features: HTTP HTTPS iSCSI DNS bzImage ELF PXE PXEXT Menu
net0: 00:0d:b9:13:43:04 using undionly on UNDI-PCI00:09.0 (open)
   [Link:up, TX:0 TXE:0 RX:0 RXE:0]
DHCP (net0 00:0d:b9:13:43:04)... ok
net0: 10.1.1.2/255.255.255.0 gw 10.1.1.1
Filename: 
https://my.server/cgi-bin/ipxe/ipxe.cgi?i=${netX/ip}&m=${netX/mac:hexhyp}&v=${manufacturer:uristring}&p=${product:uristring
https://my.server/cgi-bin/ipxe/ipxe.cgi?i=10.1.1.2&m=00-0d-b9-13-43-04&v=&p=%24%7Bproduct%3Auristring...X509 
chain 0x1eaa4 added X509 0x1f7f4 "my.server"
X509 chain 0x1eaa4 added X509 0x20b24 "My Root CA"
X509 0x1f7f4 "my.server" is not yet valid (at time 946684821)
X509 0x20b24 "My Root CA" is not yet valid (at time 946684821)
X509 chain 0x1eaa4 found no valid certificates
  Permission denied (http://ipxe.org/0216e63c)
</snip>