aboutsummaryrefslogtreecommitdiffstats
path: root/ipsec-to-dns
diff options
context:
space:
mode:
authorGravatar Christian Hesse <mail@eworm.de>2019-04-30 15:11:54 +0200
committerGravatar Christian Hesse <mail@eworm.de>2021-05-18 16:32:26 +0200
commitf2433b8091a7966db6cf2a8bc6890e576b592d13 (patch)
tree598d53959aae746daf122bdc8e056eb9474026c4 /ipsec-to-dns
parent862417b8d32f6eef1c05ba9137fe2a7f14436987 (diff)
drop certificate DST Root CA X3
Let's Encrypt planned the transition to ISRG's root certificate ("ISRG Root X1") on July 8, 2019, but postponed several times. Finally they found another solution: A certificate 'ISRG Root X1', but cross-signed with 'DST Root CA X3' and with a livetime that exceeds that of the root CA. This is said to work for most operating system where root certificate authorities are just 'trust anchors'. I doubt this is true for RouterOS, where certificates are just imported into the certificate store. So let's migrate to 'ISRG Root X1' now.
Diffstat (limited to 'ipsec-to-dns')
0 files changed, 0 insertions, 0 deletions