Skip to content
Snippets Groups Projects
Commit b6418764 authored by Stan Hu's avatar Stan Hu
Browse files

Update cacerts to 2021-09-30

LetsEncrypt depended on the DST Root CA X3 cert that expired in
September. Clients need to trust the ISRG Root X1 for LetsEncrypt to
function. The previous certs did include the X1 cert, but this update
removes the expired X3 cert.

This doesn't necessarily solve the LetsEncrypt issues since OpenSSL
v1.1.1 defaults to finding the first trusted chain, but we should keep
these certs up-to-date.

Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/342326

Changelog: fixed
parent 60ce6400
No related branches found
No related tags found
2 merge requests!55Intermediate build after shift of stable series,!54GitLab 14.4
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment