Ubuntu on IBM z Systems

  1. Bug #1872941
  2. Comment #34

Comment 34 for bug 1872941

Revision history for this message
Dimitri John Ledkov (xnox) wrote : Re: [Bug 1872941] Comment bridged from LTC Bugzilla

On Tue, 28 Apr 2020 at 07:41, bugproxy <email address hidden> wrote:
>
> ------- Comment From <email address hidden> 2020-04-28 02:27 EDT-------
> > Booting over the public internet FTP server, terrifies me. Because
> > there is no secureboot verification of either kernel or the initrd.
> > Meaning it's trivial to man-in-the-middle attack, and inject things
> > into the installer. Can HMC support HTTPS load?
>
> It does support FTPS (via SSL) and SFTP (via SSH). Not sure how good
> the certificate verification is.
>
> Can you maybe open an RFE against the HMC to also provide HTTPS?
>

Oooh, let me check if we have or can deploy FTPS.

Pure HTTPS is a bit awkward, because there is no directory discovery
like there is over (S)FTP(S). I need to check how UEFI HTTPS boot
works, to see if something "in spirit" similar can be done on HMC.

--
Regards,

Dimitri.