HTTPS from a pxe built using rom-o-matic

[robinsmidsrod]

Follow the instructions on http://ipxe.org/crypto to build a HTTPS-enabled ipxe binary. If you only plan to connect to this one server only then you can just embed the server certificate and trust that. If you need to connect to multiple servers then you either need to have them all use the same CA (e.g. company one) and you should trust the CA cert. If you need to support multiple roots then you need to either use the public cross-cert mechanism on ca.ipxe.org (default) or create your own (challenging, but doable) cross-cert setup.