GrapheneOS

489 readers

53 users here now

An unofficial discussion community for anyone interested in GrapheneOS.

Helpful links:

Official Graphene OS Discussion Forum

List of official Matrix channels and other contact sources.

founded 2 years ago

MODERATORS

wxboss

Hardenize Compatibility Issue With Let's Encrypt Certs Using tlsserver (grapheneos.social)

submitted 1 week ago by cm0002@lemmy.world to c/graphene_os

0 comments fedilink hide all child comments

We noticed Hardenize (https://www.hardenize.com/) isn't compatible with Let's Encrypt certificates using the recently launched tlsserver profile. See https://letsencrypt.org/docs/profiles/ for details, it mainly drops non-SNI client support. Maybe we have a contact who can get it fixed quickly.

We deployed tlsserver for our services to prepare for shortlived:

https://grapheneos.social/@GrapheneOS/114452845473608945

We didn't deploy it for SMTP because too many mail servers likely still lack SNI support. For SUPL, we did a hybrid deployment until we're ready to drop 4th/5th gen Pixel support.

no comments (yet)

sorted by: hot top controversial new old

there doesn't seem to be anything here