Skip to content

v1.6.13 - A restart keeps the certificate it already has

Choose a tag to compare

@andrewhack andrewhack released this 20 Sep 18:33
· 95 commits to main since this release

With IPADDRESS set, the container asked Stremio's certificate service for a trusted certificate on
every single start, even when the one already on disk was good for months. It now keeps that
certificate when it is the magic-DNS wildcard and still has more than a month to run, and fetches
only when it is not. A box that is briefly offline at boot keeps its trusted certificate instead of
falling back to a self-signed one.

The month is deliberate: the server's own health check reports a lapsing certificate from fourteen
days out, so the window sits above that and a restart renews before the warning rather than after
it. A test fails if the two ever drift apart.

Every existing fallback is unchanged — no certificate, an unreadable one, one issued for another
name, or anything else the check cannot settle fetches exactly as before.

Upgrade: pull it.