mmatuska / mfsbsd

mfsBSD
http://mfsbsd.vx.sk
BSD 2-Clause "Simplified" License
476 stars 134 forks source link

The switch to https broke netboot.xyz #101

Open patrakov opened 4 years ago

patrakov commented 4 years ago

Netboot.xyz uses mfsbsd to install FreeBSD over the network: https://github.com/antonym/netboot.xyz/blob/master/src/freebsd.ipxe

Unfortunately, trying to install FreeBSD via booting from https://boot.netboot.xyz fails now, with a "permission denied" error:

Screenshot

I have debugged this to the key exchange algorithm mismatch between what is supported by iPXE and what is offered by https://mfsbsd.vx.sk/ . Namely, iPXE only supports RSA-based key exchange, while your site offers ECDHE-based stuff. Please support one of the following key exchange methods:

Cipher Suites (4 suites) Cipher Suite: TLS_RSA_WITH_AES_128_CBC_SHA256 (0x003c) Cipher Suite: TLS_RSA_WITH_AES_256_CBC_SHA256 (0x003d) Cipher Suite: TLS_RSA_WITH_AES_128_CBC_SHA (0x002f) Cipher Suite: TLS_RSA_WITH_AES_256_CBC_SHA (0x0035)

Tozzi89 commented 10 months ago

This is still an issue today.