Skip to content

Update CA trust store - #411

Merged
mitch292 merged 1 commit into
cloudflare:masterfrom
aberglund-cf:fix/emudhra-intermediate-cleanup
Oct 20, 2026
Merged

mitch292 merged 1 commit into
cloudflare:masterfrom
aberglund-cf:fix/emudhra-intermediate-cleanup

Conversation

@aberglund-cf

Copy link
Copy Markdown
Contributor

Summary

  • Update CA trust bundles and release tooling.
  • Remove four obsolete cross-signed CA certificates from the current intermediate bundle while retaining their self-signed roots.
  • Preserve historical bundle snapshots and add regression coverage.

Validation

  • go test ./... -count=1
  • go vet ./...
  • Verified the intermediate update removes exactly four certificates without reordering remaining entries.
  • Verified retained self-signed roots and historical release membership are unchanged by the intermediate cleanup.
  • Verified current bundle regeneration and a subsequent release roll on a database copy.

Update trusted CA certificates and remove obsolete cross-signed
intermediates. Preserve historical bundle snapshots and update
release tooling and regression coverage.

Validation: go test ./... and go vet ./...

@mitch292 mitch292 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@mitch292
mitch292 merged commit 452bcce into cloudflare:master Oct 20, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants