[ipxe-devel] HTTPS error : http://ipxe.org/err/1c25e0

[Youkay akay]

Hi Christian


Sorry for the delay.

I am not using Hyper-V. I am running iPXE on Intel's Ivy Bridge processor.


I don't see the definition of get_noise
in src/arch/i386/interface/pcbios/rtc_entropy.c. Do we need to custom
define it based on our environment ?


Debug logs

=========

DRBG 0x79dfdd50 instantiate

DRBG 0x79dfdd50 could not get entropy input: Error 0x4226e195 (
http://ipxe.org/4226e195)

RBG could not instantiate DRBG: Error 0x4226e195 (http://ipxe.org/4226e195)




On Sat, Dec 23, 2017 at 3:40 AM, Christian Nilsson <nikize at gmail.com> wrote:

> On Fri, Dec 22, 2017 at 11:50 PM, Youkay akay <youkay.akay at gmail.com>
> wrote:
> > Hi
> >
> > I enabled HTTPS by adding  #define DOWNLOAD_PROTO_HTTPS to
> > src/config/local/general.h
> >
> > But when i try to download the image , i get the below error.
> >
> > iPXE>boot https://[ipv6]/image_path
> > Could not start download: Invalid argument (http://ipxe.org/1c25e082)
> >
>
> Hi,
> Reading the URL in the error you can find this:
>
> "This error indicates that the cryptographic random bit generator
> could not be initialised. This usually indicates that there is no good
> source of entropy available.
>
> There is a known bug in the Microsoft Hyper-V hypervisor (as used for
> Microsoft Azure virtual machines), in which the emulated CMOS RTC
> hardware seems to be incapable of generating an interrupt. This breaks
> the entropy generation mechanism used by iPXE, and will result in this
> error. There are some indications that this problem affects only AMD
> hardware, though this has not been proved conclusively. If you are
> using Microsoft Azure, then you may be able to work around the problem
> by using a larger instance (which is more likely to use an Intel
> CPU)."
>
> Are you using Hyper-V when testing this, or is it other hardware?
>
> /Christian
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ipxe.org/pipermail/ipxe-devel/attachments/20180108/d07d2ae4/attachment.htm>