Private
Public Access
1
0

fix(certs): replace encrypted CA with unencrypted ECDSA P-256 CA
All checks were successful
CI/CD Pipeline / Code Format (push) Successful in 4s
CI/CD Pipeline / Clippy Lints (push) Successful in 43s
CI/CD Pipeline / All Unit Tests (push) Successful in 1m13s
CI/CD Pipeline / Security Audit (push) Successful in 5s
CI/CD Pipeline / Enrollment Tests (push) Successful in 1m13s
CI/CD Pipeline / Verify Enrollment CLI Flag (push) Successful in 1m1s
CI/CD Pipeline / Build Arch Package (push) Successful in 2m51s
CI/CD Pipeline / Build Debian Package (Ubuntu 22.04) (push) Successful in 2m34s
CI/CD Pipeline / Build Debian Package (push) Successful in 2m45s
CI/CD Pipeline / Build Alpine Package (push) Successful in 3m56s
CI/CD Pipeline / Build RPM Package (push) Successful in 4m15s

- Replaced password-protected RSA CA with unencrypted ECDSA P-256 CA
  to prevent manager startup failures from encrypted keys.
- Regenerated server and client certificates (client001) with new CA.
- Updated CA_SETUP.md to use openssl genpkey (unencrypted) instead of
  openssl genrsa -aes256, with warning against encrypted keys.
This commit is contained in:
2026-05-18 16:00:22 +00:00
parent fc0b42040e
commit 73a11e70e0
9 changed files with 54 additions and 210 deletions

View File

@ -1 +1 @@
790CDB9FA2002BF59B3EE88AF326CB060353D111
790CDB9FA2002BF59B3EE88AF326CB060353D113