I am using ipxe and apache server with self signed certificates. I fetch vmlinuz from the server using https.
I am using an embedded script in order to boot from the HTTPS. And I am getting a permission denied error:
iPXE> kernel https://10.10.10.10:443/boot/vmlinuz https://10.10.10.10:443/boot/vmlinuz... Permission denied (http://ipxe.org/0216ea8f) iPXE>
I think this permission denied is actually trust issue and the client and server are not able to make the ssl connection. Here is what I do:
Generated the root certificate (ca.crt) and the private key (ca.key) using (described on ipxe website):
openssl req -x509 -newkey rsa:2048 -out ca.crt -keyout ca.key -days 1000
As I have configured apache server on centos 7, I keep the following files at: /etc/pki/tls/certs/ca.crt /etc/pki/tls/private/ca.key
make bin-x86_64-efi/ipxe.efi TRUST=/path/to/ca.crt and CERT=/path/to/ca.crt
If I open the URL with https from a browser, it works properly. Not sure why ipxe is not going through. I am a beginner in certificate related stuff, not sure where I am making the mistake or what am I lacking.
I went through this page already: How do I get iPXE to boot from HTTPS server with self signed cert?