relaycorp / awala-endpoint-android

High-level library for Android apps implementing Awala endpoints
Apache License 2.0
1 stars 1 forks source link

Re-register first-party endpoints when the private gateway's certificate changes #175

Closed gnarea closed 2 years ago

gnarea commented 2 years ago

What to do with old certificates

Old certificates should continue to be used in all calls to parcel.validate(). The old (yet valid) certificates should be passed as trustedCertificates, along with the new certificate.

Old certificates should only be deleted after they expire (e,g., once a day, when the app starts). However, expired certificates must not be included in the trustedCertificates above.

What to do with the new certificate

The new certificate should be used in all calls to parcel.serialize() and issueDeliveryAuthorization(). This shouldn't require code any further code changes, but I'm documenting this requirement to make sure we don't change the code inadvertently.

Related issues

sdsantos commented 2 years ago
github-actions[bot] commented 2 years ago

:tada: This issue has been resolved in version 1.10.0 :tada:

The release is available on GitHub release

Your semantic-release bot :package::rocket: