[ipxe-devel] trying to leverage https address but not with certificates.

[Christian Nilsson]

Do you get a error and a ipxe.org error URL or does it just hang?
Does the network have access to the internet (for possible download of the
certificate chain)

the proper way to enable functions is to add the just needed ones to the
proper config/local file, in this case adding
#define  DOWNLOAD_PROTO_HTTPS    /* Secure Hypertext Transfer Protocol */
into src/config/local/general.h

note the #define instead of $define (which should cause compilation error i
hope)

/Christian

On Tue, Nov 22, 2016 at 5:59 PM, Blatt, Andrew C <
andrew.blatt at bankofamerica.com> wrote:

> Hi,
>
>
>
> I’m trying to access a pxelinux.cfg file over HTTPS instead of HTTP:
>
>
>
> #!ipxe
>
> # Disable automated download of certificates since it is done against
>
> # unauthenticated host which may lead to exploits
>
>
>
> ifstat net0
>
> imgfetch -n kernel https://WEBSERVER/pxelinux.cfg/01-${net0/mac:hexhyp}
> && goto image_ok || goto discovery_image
>
>
>
> :discovery_image
>
> ifstat net0
>
> imgfetch -n kernel https://WEBSERVER/pxelinux.cfg/default || echo
> ${net0/mac}:${ip} - Boot Failed
>
>
>
> :image_ok
>
> imgload kernel
>
> boot kernel
>
>
>
> I’ve tried compiling ipxe-fd95c78 and updated config/general.h to include
> $define DOWNLOAD_PROTO_HTTPS but it still fails to access the URL, if I
> change it back to http://WEBSERVER, it works.
>
>
>
> Any advice?
>
>
>
> Thank you.
>
>
>
> Andrew
> ------------------------------
> This message, and any attachments, is for the intended recipient(s) only,
> may contain information that is privileged, confidential and/or proprietary
> and subject to important terms and conditions available at
> http://www.bankofamerica.com/emaildisclaimer. If you are not the intended
> recipient, please delete this message.
>
> _______________________________________________
> ipxe-devel mailing list
> ipxe-devel at lists.ipxe.org
> https://lists.ipxe.org/mailman/listinfo.cgi/ipxe-devel
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ipxe.org/pipermail/ipxe-devel/attachments/20161122/5a5d24a8/attachment.htm>