optional client cert issue

[mcb30]

(2015-08-24 21:59)jcline Wrote:  Thanks Michael for jumping on this. Without baking in a trusted root I get a http://ipxe.org/err/420c60 (broken pipe) - unfortunately without much more info. I'll try flipping debug on here and see if I can get any more details. Also instead of doing a chain I'll try doing an imgfetch and imgstat, see if I can kinda bisect the problem a little. If we get there I'll try adding the cert and see what happens.

Any other debug suggestions?

That error indicates that the HTTP(S) server closed the socket at an unexpected stage. It's most likely that the server closed the socket before TLS negotiation was complete: the HTTP layer would see this as an unexpected close.

Building with DEBUG=tls,x509,validator should show most of the relevant debug events.

Michael