From 7de1affda89596ec7daf6bc81ba22d878831b0ba Mon Sep 17 00:00:00 2001 From: eal Date: Fri, 3 Jul 2026 12:46:03 +0300 Subject: [PATCH] Dockerfile: update base images to fix problems with SSL handshakes My instance has been having problems with push federation since updating to v2.10.2, using the docker image. Posts are not reaching their destination instance until some other interaction initiates a fetch from source. The logs contain lots of errors such as: ``` pleroma | 09:34:40.885 [notice] TLS :client: In state :wait_cert_cr at ssl_handshake.erl:2158 generated CLIENT ALERT: Fatal - Unsupported Certificate pleroma | - {:key_usage_mismatch, pleroma | {{:Extension, {2, 5, 29, 15}, true, [:keyCertSign, :cRLSign]}, pleroma | {:Extension, {2, 5, 29, 37}, false, [{1, 3, 6, 1, 5, 5, 7, 3, 1}]}}} ``` This erlang/OTP issue seems to be the same problem: https://github.com/erlang/otp/issues/9208 The erlang version committed here was selected after discussion in the merge request. I have not noticed any federation problems with an image built from this dockerfile. --- Dockerfile | 4 ++-- changelog.d/docker-baseimage-ssl.fix | 1 + 2 files changed, 3 insertions(+), 2 deletions(-) create mode 100644 changelog.d/docker-baseimage-ssl.fix diff --git a/Dockerfile b/Dockerfile index 5fd1cc0a1..87c698f93 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,8 +1,8 @@ # https://hub.docker.com/r/hexpm/elixir/tags ARG ELIXIR_IMG=hexpm/elixir ARG ELIXIR_VER=1.17.3 -ARG ERLANG_VER=26.2.5.6 -ARG ALPINE_VER=3.17.9 +ARG ERLANG_VER=27.3.4.14 +ARG ALPINE_VER=3.23.5 ARG ELIXIR_TAG=${ELIXIR_VER}-erlang-${ERLANG_VER}-alpine-${ALPINE_VER} ARG ALPINE_IMG=alpine diff --git a/changelog.d/docker-baseimage-ssl.fix b/changelog.d/docker-baseimage-ssl.fix new file mode 100644 index 000000000..441423f49 --- /dev/null +++ b/changelog.d/docker-baseimage-ssl.fix @@ -0,0 +1 @@ +Dockerfile: update base images to fix problems with SSL handshakes \ No newline at end of file