@jrm Enabling HTTPS means that you need to recompile the iPXE binaries as well to add your local CA certificate. We added that functionality to FOG in 1.5.5 and fixed it in 1.5.6. I am sorry but we can’t put much effort into backporting those changes to 1.5.2 as we have way too much to do with current changes and requests.
Let me suggest you look into the current version of the iPXE compile script that comes with FOG 1.5.6. Maybe download and try this: https://github.com/FOGProject/fogproject/blob/master/utils/FOGiPXE/buildipxe.sh
But as well you probably need to adjust apache configs manually.