0

I am using ipxe and apache server with self signed certificates. I fetch vmlinuz from the server using https.

I am using an embedded script in order to boot from the HTTPS. And I am getting a permission denied error:

iPXE> kernel https://10.10.10.10:443/boot/vmlinuz
https://10.10.10.10:443/boot/vmlinuz... Permission denied (http://ipxe.org/0216ea8f)
iPXE>

I think this permission denied is actually trust issue and the client and server are not able to make the ssl connection. Here is what I do:

  1. Generated the root certificate (ca.crt) and the private key (ca.key) using (described on ipxe website):

    openssl req -x509 -newkey rsa:2048 -out ca.crt -keyout ca.key -days 1000

  2. As I have configured apache server on centos 7, I keep the following files at: /etc/pki/tls/certs/ca.crt /etc/pki/tls/private/ca.key

  3. make bin-x86_64-efi/ipxe.efi TRUST=/path/to/ca.crt and CERT=/path/to/ca.crt

If I open the URL with https from a browser, it works properly. Not sure why ipxe is not going through. I am a beginner in certificate related stuff, not sure where I am making the mistake or what am I lacking.

I went through this page already: How do I get iPXE to boot from HTTPS server with self signed cert?

Improve this question
  • following the link of the error and code, it probably requires 10.10.10.10 to be in the SAN of the cert (as IP:10.10.10.10) – A.B Mar 22 '20 at 21:11

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.