Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Last revision Both sides next revision | ||
|
err:0216eb [2018/01/24 18:16] nikize fomatting |
err:0216eb [2018/10/01 21:40] nikize add explanation of how to use TRUST with multiple certificates |
||
|---|---|---|---|
| Line 13: | Line 13: | ||
| make bin/ipxe.lkrn EMBED=../syslinux.ipxe CERT=../certs/cert-and-key.pem TRUST=../certs/cert-and-key.pem | make bin/ipxe.lkrn EMBED=../syslinux.ipxe CERT=../certs/cert-and-key.pem TRUST=../certs/cert-and-key.pem | ||
| - | Add ''DEBUG=tls,x509,certstore,privkey'' to make line for relevant run-time debug info. | + | Add ''DEBUG=tls,x509:3,certstore,privkey'' to make line for relevant run-time debug info. |
| + | |||
| + | If you want to trust multiple root certificates, use one certificate per file and specify all files separated with comma as described [[https://git.ipxe.org/ipxe.git/commit/aee3a064f22f994a930990c1bb0d339412e65d76|in the commit]] that introduced the feature. | ||
| + | |||
| + | === Checklist === | ||
| + | |||
| + | * **Time:** Check that your BIOS time is correct. I encountered this error right after resetting the CMOS. If the BIOS date is before the cert issue date, you should get this error. | ||
