search

erlef / security-wg

Repo for the Security Working Group
https://erlef.github.io/security-wg/
192 stars 17 forks source link

Update ssl opts for OTP 25 #23

Closed voltone closed 1 year ago

yordis commented 1 year ago

Could I use such public_key:cacerts_get() in my prod.exs in Elixir land to configure the certs?

voltone commented 1 year ago

That’s probably not a good idea: prod.exs is evaluated at compile time, so it would pick up the CA trust store from your build machine rather than the runtime environment (which may or may not be a problem) and updating the CA trust store would require a recompile, rather than automatically picking up updates from the deployment machine OS