Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

LetsEncrypt cert from the included CA Bundle is expired #356

Open
Sayrus opened this issue Nov 3, 2022 · 0 comments · May be fixed by #367
Open

LetsEncrypt cert from the included CA Bundle is expired #356

Sayrus opened this issue Nov 3, 2022 · 0 comments · May be fixed by #367

Comments

@Sayrus
Copy link

Sayrus commented Nov 3, 2022

Following LetsEncrypt CA rotation in 2021, the ca-certs included in the latest image (0.10.1) are expired. I'm not familiar with Nix but it seems that nixos-19.03 might be a very old base amd tje cacert package is outdated (certifi is also from 2019).

As a workaround, I've included my own CA in my deployment.

Is there a plan for #288 and #291 to be merged soon? Is this something I can contribute on?

If not, is there a plan to upgrade the version?
@Sayrus Sayrus mentioned this issue Nov 3, 2022
Open
benkard added a commit to benkard/marge-bot that referenced this issue Jan 8, 2023
@benkard
Update CA certificates to NSS 3.87.
828496d 
Fixes smarkets#356.
@benkard benkard linked a pull request Jan 8, 2023 that will close this issue
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Update CA certificates to NSS 3.87 benkard/marge-bot
1 participant
@Sayrus