Skip to content
Snippets Groups Projects
user avatar
Stan Hu authored
LetsEncrypt depended on the DST Root CA X3 cert that expired in
September. Clients need to trust the ISRG Root X1 for LetsEncrypt to
function. The previous certs did include the X1 cert, but this update
removes the expired X3 cert.

This doesn't necessarily solve the LetsEncrypt issues since OpenSSL
v1.1.1 defaults to finding the first trusted chain, but we should keep
these certs up-to-date.

Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/342326

Changelog: fixed
b6418764
History
Name Last commit Last update
..
patches
projects
software
templates