Skip to content

simplify by putting the cert directly into the Updater's CA bundle#467

Closed
jakecoffman wants to merge 1 commit intomainfrom
put-cert-directly
Closed

simplify by putting the cert directly into the Updater's CA bundle#467
jakecoffman wants to merge 1 commit intomainfrom
put-cert-directly

Conversation

@jakecoffman
Copy link
Member

I had been meaning to try this. By putting the Proxy cert directly into the system's trusted CA bundle, we can avoid needing to run update-ca-certificates. This only works because the Updater can only communicate via the Proxy, so all other certs are not needed.

@jakecoffman
Copy link
Member Author

We can't do this because ecosystems like java have special packages like ca-certificates-java which transform certificates to their own special formats. So sadly, we won't be able to escape update-ca-certificates.

@jakecoffman jakecoffman deleted the put-cert-directly branch June 24, 2025 17:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant