Hello,
I have been using a self-signed certificate on my Fossil server for the last year and it just expired. I have replaced the expired self-signed certificate with a new/different self-signed certificate.

However, two scary things happened:
1. The Fossil client kept on working with the old expired certificate.
2. Fossil trusted the new certificate without any interaction from me.

Have I done something stupid or have I misunderstood what protection Fossil provides when using self signed certificates?

Many thanks for your help.
Saul Hazledine
_______________________________________________
fossil-users mailing list
[email protected]
http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users

Reply via email to