This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
err:0216eb [2018/01/19 22:19] 146.163.150.61 |
err:0216eb [2019/07/09 12:28] mcb30 |
||
---|---|---|---|
Line 1: | Line 1: | ||
- | Using a self-signed certificate, the following build command resulted in a ipxe kernel that would yield this "0216eb.." error. | + | Add ''DEBUG=tls,x509:3,certstore,privkey'' to make line for relevant run-time debug info. |
- | make bin/ipxe.lkrn EMBED=../syslinux.ipxe CERT=../certs/selfsigned-cert.pem TRUST=../certs/selfsigned-cert.pem | + | If you want to trust multiple root certificates, use one certificate per file and specify all files separated with comma as described [[https://git.ipxe.org/ipxe.git/commit/aee3a064f22f994a930990c1bb0d339412e65d76|in the commit]] that introduced the feature. |
- | Adding the "PRIVKEY" option did not seem to resolve the error. | + | === Checklist === |
- | By trial-and-error, I found the following method to work-around the error. | + | * **Time:** Check that your BIOS time is correct. I encountered this error right after resetting the CMOS. If the BIOS date is before the cert issue date, you should get this error. |
- | cd ../certs | ||
- | |||
- | cat selfsigned-cert.pem selfsigned-key.pem > cert-and-key.pem | ||
- | |||
- | cd ../src | ||
- | |||
- | make bin/ipxe.lkrn EMBED=../syslinux.ipxe CERT=../certs/cert-and-key.pem TRUST=../certs/cert-and-key.pem | ||
- | |||
- | P.S. adding DEBUG=tls,x509,certstore,privkey to your make command can yield some useful run-time debugging info. |