Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

preseeding work perfect for me using:

auto url=http://mydomain.com/preseed.cfg

but as soon as i use a https connection, it doesn't work any more.

auto url=https://mydomain.com/preseed.cfg

with wget i can download the preseed file without a problem, with lynx i get an

"SSL-Error:no issuer was found"

so it looks like a cert problem, i use startssl.com to generate my free certs, nginx acts as ssl webserver (no problem accessing the https site with firefox).

how to debug this? how to force to get the file over the ssl connection?

share|improve this question
    
security.ncsa.illinois.edu/research/grid-howtos/… Run A Test Client can help to debug a little, but its not the answer to my question, i am interested in how to get access to the logfile of what happen while preseeding and which tool is used to load the preseed file. – c33s Nov 28 '11 at 6:54
up vote 2 down vote accepted

The problem is that the wget from busybox is not compiled to support SSL. And there are no Certificate Authorities stored in d-i (so it really can't validate the server certificate).

The solution would be to add real wget into the initrd and add a trusted Certificate Authority.

share|improve this answer
    
i am using the regular debian business card install cd, as far as i understand, there is no way to come around this issue without rebuilding my own cd. or is there an easy way to come around this issue? – c33s Jul 25 '12 at 8:36

While @alekibango has posted what I believe to be the correct answer, I also wanted to make it known that you can also reference the file with ftp. I was able to overcome my personal https needs by making the preseed available through an ftp redirect.

share|improve this answer
    
as ftp is unencrypted this don't really help. then i can stick with http. – c33s Jun 16 at 14:39
    
It just may be a case where a user couldn't use port 80 so I wanted to make reference to the ftp option. – Mark Jun 28 at 0:23

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.