aboutsummaryrefslogtreecommitdiffstats
path: root/INSTALL
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2021-02-14 22:59:11 +0100
committerGuilhem Moulin <guilhem@fripost.org>2021-02-15 01:31:27 +0100
commit2c1a396728a381685923f7b1c4dea53d225112fc (patch)
tree2de0abe91788ea9c795e91eba38e69069412bfb1 /INSTALL
parent956764d11c9445c835f992a782d90d8de90fe565 (diff)
Add (self-signed) ISRG Roots to the CA bundle.
This allows us to fully validate provided X.509 chains using that self-contained bundle, regardless of which CAs is marqued as trusted under /etc/ssl/certs. Also, remove cross-signed intermediate CAs from the bundle as they're useless in a self-contained bundle. Also, remove decomissioned intermediate CAs Authority X3 and X4 from the bundle. This change bumps the minimum OpenSSL version to 1.1.0 (for verify(1ssl)'s ‘-trusted’ and ‘-show_chain’ options).
Diffstat (limited to 'INSTALL')
-rw-r--r--INSTALL2
1 files changed, 1 insertions, 1 deletions
diff --git a/INSTALL b/INSTALL
index a0fcb72..9ecb1bf 100644
--- a/INSTALL
+++ b/INSTALL
@@ -16,7 +16,7 @@ the following command:
apt-get install libconfig-tiny-perl libcrypt-openssl-rsa-perl libcrypt-openssl-bignum-perl libjson-perl
-lacme depends on OpenSSL and the following Perl modules:
+lacme depends on OpenSSL ≥1.1.0 and the following Perl modules:
- Config::Tiny
- Digest::SHA (core module)