4 Commits

Include renames

Author	SHA1	Message	Date
aaronandClaude Opus 5.5	66e738c792	fix(certificates): drop temporary emSign ECC Root CA - G3 distrust ... cacert 3.131.1 no longer ships this root at all, so the blacklist entry added in #111 is redundant. Closes #110 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-25 10:49:12 +01:00
aaronandClaude Opus 5.5	5b38fc4155	fix(certificates): temporarily distrust emSign ECC Root CA - G3 ... Eight eMudhra intermediates chaining to this root were generated with trivially recoverable private keys (Mozilla bug 2083449), so anyone can mint certificates that non-browser clients using the system bundle will accept. Browsers already block them; the system bundle does not until cacert 3.131.1 (nixpkgs f903b88), which has not reached nixos-unstable yet. Drop this once the flake lock includes that commit. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-21 13:39:53 +02:00
aaron	4ec579b1fc	chore(lint): add statix config and remove unused arguments	2026-10-01 11:40:03 +02:00
aaron	35319f58de	feature(ssl/tls): add my homelab pki root ca to the trust store	2026-01-23 20:20:12 +01:00