aboutsummaryrefslogtreecommitdiffstats
path: root/config/lacme-accountd.conf
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2021-02-14 22:59:11 +0100
committerGuilhem Moulin <guilhem@fripost.org>2021-02-15 01:31:27 +0100
commit2c1a396728a381685923f7b1c4dea53d225112fc (patch)
tree2de0abe91788ea9c795e91eba38e69069412bfb1 /config/lacme-accountd.conf
parent956764d11c9445c835f992a782d90d8de90fe565 (diff)
Add (self-signed) ISRG Roots to the CA bundle.
This allows us to fully validate provided X.509 chains using that self-contained bundle, regardless of which CAs is marqued as trusted under /etc/ssl/certs. Also, remove cross-signed intermediate CAs from the bundle as they're useless in a self-contained bundle. Also, remove decomissioned intermediate CAs Authority X3 and X4 from the bundle. This change bumps the minimum OpenSSL version to 1.1.0 (for verify(1ssl)'s ‘-trusted’ and ‘-show_chain’ options).
Diffstat (limited to 'config/lacme-accountd.conf')
0 files changed, 0 insertions, 0 deletions