Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
err:0216eb [2018/01/24 18:16] nikize fomatting |
err:0216eb [2019/07/09 12:28] mcb30 |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | Using a self-signed certificate, the following build command resulted in a iPXE binary that would yield this "0216eb.." error. | + | Add ''DEBUG=tls,x509:3,certstore,privkey'' to make line for relevant run-time debug info. |
| - | make bin/ipxe.lkrn EMBED=../syslinux.ipxe CERT=../certs/selfsigned-cert.pem TRUST=../certs/selfsigned-cert.pem | + | If you want to trust multiple root certificates, use one certificate per file and specify all files separated with comma as described [[https://git.ipxe.org/ipxe.git/commit/aee3a064f22f994a930990c1bb0d339412e65d76|in the commit]] that introduced the feature. |
| - | Adding the "PRIVKEY" option did not seem to resolve the error. | + | === Checklist === |
| - | By trial-and-error, I found the following method to work-around the error. | + | * **Time:** Check that your BIOS time is correct. I encountered this error right after resetting the CMOS. If the BIOS date is before the cert issue date, you should get this error. |
| - | cd ../certs | ||
| - | cat selfsigned-cert.pem selfsigned-key.pem > cert-and-key.pem | ||
| - | cd ../src | ||
| - | |||
| - | make bin/ipxe.lkrn EMBED=../syslinux.ipxe CERT=../certs/cert-and-key.pem TRUST=../certs/cert-and-key.pem | ||
| - | |||
| - | Add ''DEBUG=tls,x509,certstore,privkey'' to make line for relevant run-time debug info. | ||
