search

eryph-org / eryph

https://www.eryph.io
Other
4 stars 3 forks source link

New certificate is added to the certificate store on each start #239

Closed ChristopherMann closed 2 months ago

ChristopherMann commented 2 months ago

eryph-zero adds a new token signing certificate (eryph-identity) to the certificate store on each start and instead of reusing the existing certificate. The old certificates are also not removed which pollutes the certificate store.

AB#697

fw2568 commented 2 months ago

confirmed, added to milestone

fw2568 commented 2 months ago

questions is also why token signing cert has to be added to store at all, looks to be something that broke with the switch to openiddict.

fw2568 commented 2 months ago

mmh, ok, blame author of #70 , seems to be necessary to be in store.

fw2568 commented 2 months ago

@ChristopherMann as discussed - when looking at this issue - check if removing the ca certificate is a option, so we add only the ssl certificate self signed to computer store for local access and export the public cert for remote SSL users.