pleroma

hj/pleroma

Fork 0

Commit graph

Author	SHA1	Message	Date
Lain Soykaf	f4ff7cb1ea	fix(http): make Finch trust the CAStore bundle Mint trusts the OTP CA store, which comes from the OS. Load the CAStore bundle into it when Finch starts, so Finch trusts the same roots as the other adapters.	2026-10-21 08:27:30 +04:00
Lain Soykaf	d8c880e494	fix(http): make Hackney trust the CAStore bundle Hackney trusts its own certifi bundle, which still has the roots of the compromised eMudhra intermediate CAs. Pass explicit ssl_options with the CAStore bundle. Hackney drops all its TLS defaults when ssl_options are given, so keep peer and hostname checks in the options.	2026-10-21 08:21:43 +04:00

Author

SHA1

Message

Date

Lain Soykaf

f4ff7cb1ea

fix(http): make Finch trust the CAStore bundle

Mint trusts the OTP CA store, which comes from the OS. Load the CAStore
bundle into it when Finch starts, so Finch trusts the same roots as the
other adapters.

2026-10-21 08:27:30 +04:00

Lain Soykaf

d8c880e494

fix(http): make Hackney trust the CAStore bundle

Hackney trusts its own certifi bundle, which still has the roots of the
compromised eMudhra intermediate CAs. Pass explicit ssl_options with the
CAStore bundle. Hackney drops all its TLS defaults when ssl_options are
given, so keep peer and hostname checks in the options.

2026-10-21 08:21:43 +04:00

2 commits