[ipxe-devel] trying to leverage https address but not with certificates.

[Blatt, Andrew C]

Hi,

I'm trying to access a pxelinux.cfg file over HTTPS instead of HTTP:

#!ipxe
# Disable automated download of certificates since it is done against
# unauthenticated host which may lead to exploits

ifstat net0
imgfetch -n kernel https://WEBSERVER/pxelinux.cfg/01-${net0/mac:hexhyp} && goto image_ok || goto discovery_image

:discovery_image
ifstat net0
imgfetch -n kernel https://WEBSERVER/pxelinux.cfg/default || echo ${net0/mac}:${ip} - Boot Failed

:image_ok
imgload kernel
boot kernel

I've tried compiling ipxe-fd95c78 and updated config/general.h to include $define DOWNLOAD_PROTO_HTTPS but it still fails to access the URL, if I change it back to http://WEBSERVER, it works.

Any advice?

Thank you.

Andrew

----------------------------------------------------------------------
This message, and any attachments, is for the intended recipient(s) only, may contain information that is privileged, confidential and/or proprietary and subject to important terms and conditions available at http://www.bankofamerica.com/emaildisclaimer.   If you are not the intended recipient, please delete this message.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ipxe.org/pipermail/ipxe-devel/attachments/20161122/975037b5/attachment.htm>