This means inserting the root to a proper place for nikola and logsend. It also means preparing the intermediate CA and making sure it can create the revocation lists. Some kind of HSM would be nice to protect it, and we need to decide on the process of renewals of the CRLs.

• Subtask turris/misc#9 (closed) (Logsend)
• Subtask turris/turris-os-packages#11 (closed) (Cacert bundle)
• Subtask turris/common-internal#31
• Subtask turris/nuci#10 (closed)
• Nikola
• Firewall downloader
• Proxy of OpenWRT repositories