Skip to content

GitLab

  • Menu
Projects Groups Snippets
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • Turris OS packages Turris OS packages
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 81
    • Issues 81
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 15
    • Merge requests 15
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Releases
  • Packages & Registries
    • Packages & Registries
    • Container Registry
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • Turris
  • Turris OS
  • Turris OS packagesTurris OS packages
  • Issues
  • #481

Closed
Open
Created Sep 10, 2019 by Vojtech Myslivec@vmyslivecContributor

Cancel certificate pinning for our packages

Some of our tools insist certificate pinning which is not handled well (e.g. 2 LE intermediate certificates...). We should get rid of them.

There was already a MR !77 (merged) do handle this but it was insufficient.

This is mainly about /etc/ssl/www_turris_cz_ca.pem file from cznic-cacert-bundle package. I have discovered these packages using this file as a CAFile:

  • server-uplink (from turris/turris-os-packages>)
  • haas (also from turris/turris-os-packages>)
  • netmetr (from turris/netmetr-client>)
Edited Sep 10, 2019 by Vojtech Myslivec
Assignee
Assign to
Time tracking