Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update cacert.pem for android build #405

Open
jecxjo opened this issue Dec 15, 2021 · 3 comments
Open

Update cacert.pem for android build #405

jecxjo opened this issue Dec 15, 2021 · 3 comments

Comments

@jecxjo
Copy link

jecxjo commented Dec 15, 2021

The file containing the root SSL certs hasn't been updated since 2018 (4 years). With the issue around Let's Encrypt, any root certs that would have expired since then or are soon to expire will cause any self hosted instance to fail.

@marvinwankersteen
Copy link

marvinwankersteen commented May 2, 2022

I have the same problem. Do you know how, where and if the file can be replaced?

Edit**
I found it: https://github.com/turtl/android/blob/master/scripts/cacert.pem

@mneute
Copy link

mneute commented May 27, 2022

I don't understand how I'm supposed to replace this file. Is there a specific certificate I should put instead ?

@jmthackett
Copy link

This file:

https://github.com/turtl/android/blob/5d257b701e0980972ca9bf17032b8f1bc51ee41a/scripts/cacert.pem

Needs to be updated with the mozilla bundle found here:

https://curl.se/docs/caextract.html

Which itself contains all of the root CAs listed here:

https://wiki.mozilla.org/CA/Included_Certificates

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants