[ipxe-devel] Sectigo/UserTrust certificates not supported

Adam Baxter voltagex at voltagex.org
Sun Jun 7 07:56:17 UTC 2020


For the benefit of anyone Googling this, I was able to manually trust this chain by doing the following:

ex +'g/BEGIN CERTIFICATE/,/END CERTIFICATE/p' <(echo | openssl s_client -showcerts -connect ewr.edge.kernel.org:443) -scq > ewr.edge.kernel.org.crt

make -j4 bin/ipxe.lkrn CERT=ewr.edge.kernel.org.crt TRUST=ewr.edge.kernel.org.crt DEBUG=x509

--Adam


More information about the ipxe-devel mailing list