[gPXE] https support

[Thomas Miletich]

Hello

On Fri, Apr 15, 2011 at 5:09 AM, Schafer, Christopher L CTR USAF AFMC
AFRL/RDSM <Christopher.Schafer.CTR at maui.afmc.af.mil> wrote:
> Specifically how would I use it to get the .kpxe file and the .gpxe
> script via dhcp.
>
>
>
> # dhcpd.conf
> # untested example config
>
> # Global options
> option domain-name "blah.com";
> default-lease-time 600;
> max-lease-time 7200;
> authoritative;
> log-facility local7;
> next-server 10.45.1.33;
> host win7x64 {
>        hardware ethernet XX:XX:XX:XX:XX:XX;
>        fixed-address 10.45.1.242;
>        if exists user-class and option user-class = "gPXE"{
>                        filename "gPXEbootscripts/win7x64uscript.gpxe";
>        } else {
>                filename "default.kpxe";
>
>        }
> }

You can fetch the gPXE script over https by using the following line
in your dhcp config:

> filename https://<https-server>/gPXEbootscripts/win7x64uscript.gpxe";

Please note that currently gPXE doesn't do any certificate validation.

Hope that helps
Thomas

> -----Original Message-----
> From: gpxe-bounces at etherboot.org [mailto:gpxe-bounces at etherboot.org] On
> Behalf Of Schafer, Christopher L CTR USAF AFMC AFRL/RDSM
> Sent: Thursday, April 14, 2011 4:55 PM
> To: gpxe
> Subject: [gPXE] https support
>
> See it in the build options but no clear support accept in here:
>
>
>
> http://www.etherboot.org/wiki/appnotes/authmenus?s[]=https
> <http://www.etherboot.org/wiki/appnotes/authmenus?s%5b%5d=https>
>
>
>
> What is it's status?
>
> _______________________________________________
> gPXE mailing list
> gPXE at etherboot.org
> http://etherboot.org/mailman/listinfo/gpxe
>