Prepare the private authority to work
This means inserting the root to a proper place for nikola and logsend. It also means preparing the intermediate CA and making sure it can create the revocation lists. Some kind of HSM would be nice to protect it, and we need to decide on the process of renewals of the CRLs.
- Subtask turris/misc#9 (closed) (Logsend)
- Subtask turris/turris-os-packages#11 (closed) (Cacert bundle)
- Subtask turris/common-internal#31
- Subtask turris/nuci#10 (closed)
- Nikola
- Firewall downloader
- Proxy of OpenWRT repositories
To upload designs, you'll need to enable LFS and have admin enable hashed storage. More information