search

turtl / tracker

This project is for tracking issues, bug reports, and progress on the entire Turtl project.
67 stars 3 forks source link

Update cacert.pem for android build #405

Open jecxjo opened 2 years ago

jecxjo commented 2 years ago

The file containing the root SSL certs hasn't been updated since 2018 (4 years). With the issue around Let's Encrypt, any root certs that would have expired since then or are soon to expire will cause any self hosted instance to fail.

marvinwankersteen commented 2 years ago

I have the same problem. Do you know how, where and if the file can be replaced?

Edit** I found it: https://github.com/turtl/android/blob/master/scripts/cacert.pem

mneute commented 2 years ago

I don't understand how I'm supposed to replace this file. Is there a specific certificate I should put instead ?

jmthackett commented 1 year ago

This file:

https://github.com/turtl/android/blob/5d257b701e0980972ca9bf17032b8f1bc51ee41a/scripts/cacert.pem

Needs to be updated with the mozilla bundle found here:

https://curl.se/docs/caextract.html

Which itself contains all of the root CAs listed here:

https://wiki.mozilla.org/CA/Included_Certificates