I am chainloading iPXE (undionly.kpxe) and using an embedded script wanting to boot from HTTPS.
The problem is the HTTPS server is connecting to the http server (a custom service) via stunnel using a self signed certificate created with:
openssl req -new -x509 -days 365 -nodes -config stunnel.cnf -out stunnel.pem -keyout stunnel.pem
When it tries to contact the server I get "Permission denied" errors. Yet the URL works correctly from a browser.
I've tried downloading http://ca.ipxe.org/ca.crt and recompiling undionly.kpxe with the TRUST=ca.crt option but this didn't work.
I'm not very familiar with certificate management. How do I get ipxe to trust the stunnel server?