[Info-vax] rx8640 ILO MP port faulty?

[David Turner]

Try an old windows 7 box that wasn't recently updated and then connect to it
SSH and Browsers all fail here when I try to connect to an rx2660. New 
SSL/TLS requirements prevent connection
Pain in the aXX

On 6/12/2023 2:00 PM, pcoviello at gmail.com wrote:
> On Monday, June 12, 2023 at 1:11:58 PM UTC-4, Stephen Hoffman wrote:
>> On 2023-06-12 15:53:20 +0000, pcov... at gmail.com said:
>>
>>> as an update to this I did update the cert, still haven't figured out
>>> how to download it, if it's even possible!
>> For ssh and certificates within iLO 2 itself, see page 45ff:
>> http://h10032.www1.hp.com/ctg/Manual/c00553302.pdf#page45
>>
>> If it's generating its own self-signed cert as I'd expect by default,
>> that cert might need to be re-generated as some clients are getting
>> cranky about certificate details and lifetimes.
>>
>> I haven't run parstatus, but it wouldn't surprise to learn it's based
>> on this: https://github.com/HewlettPackard/python-ilorest-library
>>
>> As an alternative for remotely scripting iLO:
>> https://seveas.github.io/python-hpilo/index.html
>>
>> And iLO 2 ssh connections will need a severe downgrade, as has been
>> discussed here before. I've previously posted a "sethost" ssh shell
>> script as an example of that too, and that script can be tailored for
>> other connections including (ugh) telnet.
>>
>> Semi-related iLO "fun"...
>>
>> An unfixed iLO 2 boo-boo:
>> https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-c04197764
>> To disable that access path: MP:CM> sa -lanipmi d
>>
>> An iLO 4 boo-boo:
>> https://airbus-seclab.github.io/ilo/SSTIC2018-Slides-EN-Backdooring_your_server_through_its_BMC_the_HPE_iLO4_case-perigaud-gazet-czarny.pdf
>>
>> curl -H "Connection: AAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
>> (haven't tried this on iLO 2)
>>
>> -- 
>> Pure Personal Opinion | HoffmanLabs LLC
>
> thanks for this... though the web option isn't working and looking through the doc for CLI...
>