Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix CA cert for HTTPS on all remotes #9

Open
wants to merge 2 commits into
base: pj-new-wifi
Choose a base branch
from

Conversation

raph-topo
Copy link
Contributor

Replace DST Root CA X3 with ISRG Root X1.
See DST Root CA X3 Expiration (September 2021)

If you provide an API or have to support IoT devices, you’ll need to make sure of two things: (1) all clients of your API must trust ISRG Root X1 (not just DST Root CA X3), and (2) if clients of your API are using OpenSSL, they must use version 1.1.0 or later. "
Set ISRG Root X1 as root certificate authority on all logger endpoints.

@raph-topo raph-topo marked this pull request as draft November 17, 2023 17:30
@raph-topo raph-topo marked this pull request as ready for review November 17, 2023 17:34
@raph-topo
Copy link
Contributor Author

See Let's Encrypt Chain of Trust

Replace DST Root CA X3 with ISRG Root X1.
See https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/ "If you provide an API or have to support IoT devices, you’ll need to make sure of two things: (1) all clients of your API must trust ISRG Root X1 (not just DST Root CA X3), and (2) if clients of your API are using OpenSSL, they must use version 1.1.0 or later. "
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant