Search Results
Post Author Forum Replies Views Posted [asc]
  Thread: iPXE TLS requiring trusting the intermediate certificate
Post: RE: iPXE TLS requiring trusting the intermediate c...

Using wireshark shows that the difference between using `openssl s_client` and iPXE. The iPXE is not sending the entire client certificate chain (unlike openssl which builds a "client certificate chai...
CMCDragonkai General 2 6,995 2020-01-22, 07:12
  Thread: iPXE TLS requiring trusting the intermediate certificate
Post: RE: iPXE TLS requiring trusting the intermediate c...

Ok I've tested now with just server authentication, not client authentication. The same issue occurs. This time without trusting the intermediate certificate, the TLS download fails. But by trusting t...
CMCDragonkai General 2 6,995 2020-01-22, 05:56
  Thread: iPXE TLS requiring trusting the intermediate certificate
Post: iPXE TLS requiring trusting the intermediate certi...

I've got a TLS server online providing images to be bootable. It presents a certificate bundle that is signed by a private CA. The private CA has a root and intermediate certificate, the intermediate ...
CMCDragonkai General 2 6,995 2020-01-21, 09:36
  Thread: iPXE bundling certificate chains for chainbooting HTTPS resources
Post: RE: iPXE bundling certificate chains for chainboot...

(2019-11-23 15:26)NiKiZe Wrote:  I think there should be a similar question and answer on the mailinglist mozillas certificates are downloaded, bundled, and signed on ipxe once a month as i rem...
CMCDragonkai General 3 10,332 2019-12-09, 09:51
  Thread: iPXE bundling certificate chains for chainbooting HTTPS resources
Post: RE: iPXE bundling certificate chains for chainboot...

So disabling OCSP is the solution? But I'm not actually using my own custom certificate. I'm using the cacert provided to Linux distros, or even curls' certificate distribution. My question, is why t...
CMCDragonkai General 3 10,332 2019-12-02, 08:07
  Thread: iPXE bundling certificate chains for chainbooting HTTPS resources
Post: iPXE bundling certificate chains for chainbooting ...

FYI: I asked this question on StackOverflow: https://stackoverflow.com/questions/5898...-resources because I didn't get the activation email from this forum for an entire day. According to https://ip...
CMCDragonkai General 3 10,332 2019-11-22, 01:46