GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE

  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Embed Notice

HTML Code

Corresponding Notice

  1. Embed this notice
    Andrew Ayer (agwa@follow.agwa.name)'s status on Wednesday, 08-Jan-2025 21:57:18 JSTAndrew AyerAndrew Ayer
    Yesterday's Alpine Linux 3.21.1 release prematurely removed Entrust from the trust store, breaking TLS connections to servers using Entrust certs. They should have waited until Jan 2, 2026. Unfortunately, they vendor curl's mk-ca-bundle.pl and didn't update it after curl fixed this bug. https://gitlab.alpinelinux.org/alpine/ca-certificates/-/issues/6

    Alpine is a popular base image for containers so this has the potential to be disruptive.

    Background: https://sslmate.com/blog/post/entrust_distrust_more_disruptive_than_intended
    In conversationabout 22 days ago from follow.agwa.namepermalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: sslmate.com
      The Entrust Distrust Will Be More Disruptive Than Intended
      from @SSLMate
      Non-browser clients don't properly handle the Distrust After date

    3. Domain not in remote thumbnail source whitelist: gitlab.alpinelinux.org
      ca-certificates bundle incorrectly excludes root CAs with CKA_NSS_SERVER_DISTRUST_AFTER (#6) · Issues · alpine / ca-certificates · GitLab
      The build script in ca-certificates incorrectly omits CA roots with a "DistrustAfter" attribute. See this fix in curl: https://github.com/curl/curl/commit/448df98d9280b3290ecf63e5fc9452d487f41a7c#diff-672849fde302af412196cdff759aa84b274074a01561227ee4f8c102c1ee346dL556...
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.