Update cacerts to 2021-09-30
LetsEncrypt depended on the DST Root CA X3 cert that expired in September. Clients need to trust the ISRG Root X1 for LetsEncrypt to function. The previous certs did include the X1 cert, but this update removes the expired X3 cert. This doesn't necessarily solve the LetsEncrypt issues since OpenSSL v1.1.1 defaults to finding the first trusted chain, but we should keep these certs up-to-date. Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/342326 Changelog: fixed
parent
60ce6400
No related branches found
No related tags found
Showing
- config/patches/cacerts/license/2020.01.01/add-license-file.patch 0 additions, 380 deletions...patches/cacerts/license/2020.01.01/add-license-file.patch
- config/patches/cacerts/license/2021.09.30/add-license-file.patch 380 additions, 0 deletions...patches/cacerts/license/2021.09.30/add-license-file.patch
- config/software/cacerts.rb 3 additions, 3 deletionsconfig/software/cacerts.rb
Loading
Please register or sign in to comment