mirror of
https://github.com/ipxe/ipxe
synced 2026-10-07 15:05:42 +03:00
Michael Brown
194306d457
The initial ClientHello is sent and digested before the key schedule has been started (since the digest algorithm is not known until the ServerHello arrives). A server that sends a premature ServerHello with an all-zero nonce before the ClientHello is sent can currently cause the key schedule's "nonced" flag to become set. The flag will be reset when the key schedule is started and so this is unclean but harmless. Fix by ignoring any data that arrives before the digest algorithm has been set (i.e. before the key schedule has been started), since the null digest algorithm cannot meaningfully incorporate anything into a running transcript digest. Signed-off-by: Michael Brown <mcb30@ipxe.org>
iPXE network bootloader
iPXE is the leading open source network boot firmware. It provides a full PXE implementation enhanced with additional features such as:
-
boot from a web server via HTTP or HTTPS,
-
boot from an iSCSI, FCoE, or AoE SAN,
-
control the boot process with a script,
You can use iPXE to replace the existing PXE ROM on your network card, or you can chainload into iPXE to obtain the features of iPXE without the hassle of reflashing.
iPXE is free, open-source software licensed under the GNU GPL (with some portions under GPL-compatible licences).
You can download the rolling release binaries (built from the latest commit), or use the most recent stable release.
For full documentation, visit the iPXE website.