optional client cert issue

[mcb30]

(2015-08-26 01:20)jcline Wrote:  Sorry Michael, I'm struggling to get good logs, strip the escape codes etc. There is nothing sticking out like a sore thumb to me as a matter of fact I see a lot of 'successfully validated using issuer' and 'certificate validation succeeded'. I don't see a failure in the bunch. I may have to transpose them by hand if you need the detailed stack. I'll try again tomorrow AM.

One possibility (if you're on a relatively slow connection) is that the process of validating the certificate chain (including all of the OCSP lookups) could be taking so long that the HTTPS server gives up waiting and closes the socket. That would produce the symptoms as you've described so far.

If this is happening, you can work around it by retrying the HTTPS request within the same iPXE run. Certificate validation results are cached, so the second validation won't take as long.

Michael