about summary refs log tree commit diff
path: root/pkgs/tools/system/psstop
diff options
context:
space:
mode:
authorFlorian Klink2024-08-31 20:51:09 +0300
committerFlorian Klink2024-08-31 21:06:24 +0300
commitcbc93ea25054250798856602615e05d52217f72e (patch)
tree173d038371a192bea297c3182c0eb539bb3ff1c8 /pkgs/tools/system/psstop
parent12228ff1752d7b7624a54e9c1af4b222b3c1073b (diff)
amtterm: enable SSL support
Current versions of Intel AMT/vPro only support connecting over SSL, but
our current amtterm version isn't built with SSL support.

Set the `USE_OPENSSL=1` makeFlag and add openssl and pkg-config.

It adds an additional `-C cacert` parameter, which needs to point to
a previously downloaded server certificate.

The server certificate can be retrieved with
`openssl s_client -showcerts -connect $host:16995`.

However, due to the use of `UnsafeLegacyRenegotiation`, `OPENSSL_CONF`
needs to point to a text file explicitly allowing this:

```
openssl_conf = default_conf

[ default_conf ]
ssl_conf = ssl_sect

[ssl_sect]
system_default = ssl_default_sect

[ssl_default_sect]
Options = UnsafeLegacyRenegotiation
```

With this, I'm able to connect to `/dev/ttyS2` inside the host:

```
❯ AMT_PASSWORD='supersecret' amtterm $host 16995 -C cert.pem
amtterm: NONE -> CONNECT (connection to host)
ipv4 $ip [$ip] 16995 open
amtterm: CONNECT -> INIT (redirection initialization)
amtterm: INIT -> AUTH (session authentication)
amtterm: AUTH -> INIT_SOL (serial-over-lan initialization)
amtterm: INIT_SOL -> RUN_SOL (serial-over-lan active)
serial-over-lan redirection ok
connected now, use ^] to escape
Hello World
```
Diffstat (limited to 'pkgs/tools/system/psstop')
0 files changed, 0 insertions, 0 deletions