mirror of
https://github.com/ipxe/ipxe
synced 2026-10-07 15:05:42 +03:00
Michael Brown
ed4a9b2e67
If the server switches from providing stateless session tickets to providing stateful session IDs, then we will currently end up with a stored session that retains the old session ticket along with the new session ID. (This behaviour has been observed when connecting to an Apache server that requires per-directory client authentication or per-directory cipher suites: the server originally provides a stateless session ticket but then, after renegotiation to request the client certificate, provides a stateful session ID instead.) Reset both the session ID and the session ticket whenever a new session is saved (i.e. if the server provides either a new session ID or a new session ticket), so that we do not retain stale credentials. If no new session ID is provided, then create a new random session ID (rather than leaving the session with an empty session ID) since we rely on the echoed non-empty session ID to determine whether or not the server is choosing to resume, even for stateless sessions. Signed-off-by: Michael Brown <mcb30@ipxe.org>
iPXE network bootloader
iPXE is the leading open source network boot firmware. It provides a full PXE implementation enhanced with additional features such as:
-
boot from a web server via HTTP or HTTPS,
-
boot from an iSCSI, FCoE, or AoE SAN,
-
control the boot process with a script,
You can use iPXE to replace the existing PXE ROM on your network card, or you can chainload into iPXE to obtain the features of iPXE without the hassle of reflashing.
iPXE is free, open-source software licensed under the GNU GPL (with some portions under GPL-compatible licences).
You can download the rolling release binaries (built from the latest commit), or use the most recent stable release.
For full documentation, visit the iPXE website.