GitLab Commit is coming up on August 3-4. Learn how to innovate together using GitLab, the DevOps platform. Register for free:

  • Christian Hesse's avatar
    drop certificate DST Root CA X3 · f2433b80
    Christian Hesse authored
    Let's Encrypt planned the transition to ISRG's root certificate ("ISRG Root
    X1") on July 8, 2019, but postponed several times.
    Finally they found another solution: A certificate 'ISRG Root X1', but
    cross-signed with 'DST Root CA X3' and with a livetime that exceeds that
    of the root CA. This is said to work for most operating system where root
    certificate authorities are just 'trust anchors'.
    I doubt this is true for RouterOS, where certificates are just imported
    into the certificate store. So let's migrate to 'ISRG Root X1' now.
    f2433b80 10.1 KB