Re: [oi-dev] update of ca-certificates ?
PR is open at https://github.com/OpenIndiana/oi-userland/pull/7173 -Till On 14.10.21 14:40, s...@pandora.be wrote: Right, the issue seems not Squeak specific but I happen to see it in Squeak. Note that the OpenSSL support in Squeak is not perfect so I don't claim that there are no problems with the SSL plugin of Squeak, but in this case, it seems more a lower level, general issue. https://www.openssl.org/blog/blog/2021/09/13/LetsEncryptRootCertExpire/ https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/ Regards, David Stes - Op 14 okt 2021 om 19:29 schreef oi-dev oi-dev@openindiana.org: On Thu, 14 Oct 2021 at 10:26, s...@pandora.be wrote: # cd /etc/certs/CA # rm DST_Root_CA_X3.pem # svcadm restart ca-certificates at the OS level - without changing anything in Squeak. I had to do this recently as well for another application. So should there be an update of the ca-certificates package in OpenIndiana ? Yes, I believe there needs to be an update. Cheers. -- Joshua M. Clulow http://blog.sysmgr.org ___ oi-dev mailing list oi-dev@openindiana.org https://openindiana.org/mailman/listinfo/oi-dev ___ oi-dev mailing list oi-dev@openindiana.org https://openindiana.org/mailman/listinfo/oi-dev ___ oi-dev mailing list oi-dev@openindiana.org https://openindiana.org/mailman/listinfo/oi-dev
Re: [oi-dev] update of ca-certificates ?
Right, the issue seems not Squeak specific but I happen to see it in Squeak. Note that the OpenSSL support in Squeak is not perfect so I don't claim that there are no problems with the SSL plugin of Squeak, but in this case, it seems more a lower level, general issue. https://www.openssl.org/blog/blog/2021/09/13/LetsEncryptRootCertExpire/ https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/ Regards, David Stes - Op 14 okt 2021 om 19:29 schreef oi-dev oi-dev@openindiana.org: > On Thu, 14 Oct 2021 at 10:26, s...@pandora.be wrote: >> # cd /etc/certs/CA >> # rm DST_Root_CA_X3.pem >> # svcadm restart ca-certificates >> >> at the OS level - without changing anything in Squeak. > > I had to do this recently as well for another application. > >> So should there be an update of the ca-certificates package in OpenIndiana ? > > Yes, I believe there needs to be an update. > > > Cheers. > > -- > Joshua M. Clulow > http://blog.sysmgr.org > > ___ > oi-dev mailing list > oi-dev@openindiana.org > https://openindiana.org/mailman/listinfo/oi-dev ___ oi-dev mailing list oi-dev@openindiana.org https://openindiana.org/mailman/listinfo/oi-dev
Re: [oi-dev] update of ca-certificates ?
On Thu, 14 Oct 2021 at 10:26, s...@pandora.be wrote: > # cd /etc/certs/CA > # rm DST_Root_CA_X3.pem > # svcadm restart ca-certificates > > at the OS level - without changing anything in Squeak. I had to do this recently as well for another application. > So should there be an update of the ca-certificates package in OpenIndiana ? Yes, I believe there needs to be an update. Cheers. -- Joshua M. Clulow http://blog.sysmgr.org ___ oi-dev mailing list oi-dev@openindiana.org https://openindiana.org/mailman/listinfo/oi-dev
