jpmschweitzer/odysseus
1
0
Fork 0
mirror of https://github.com/pewdiepie-archdaemon/odysseus.git synced 2026-10-22 23:02:23 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix: refresh outbound HTTPS trust and installer bootstrap

Browse Source
This commit is contained in:
RaresKeY
2026-10-21 18:27:05 +00:00
parent 8877273e19
commit df1c2c8b19
14 changed files with 355 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/fixtures/ca-trust/README.md
Vendored
+5
View File
@@ -0,0 +1,5 @@
# CA trust regression fixtures
The public CA certificates embedded in `tests/test_ca_trust.py` exercise the October 2026 eMudhra trust-store check. They contain no private keys. `emsign-g3.pem` and `aaa.pem` are the incident's affected trust anchors; `emsign-g1.pem` is an unaffected emSign anchor that must remain usable. The test creates temporary PEM files from these public constants. The certificate fingerprints are the factual identity of each fixture.
Sources: the [incident root list](https://emudhra.we-have-a-problem.com/roots.json) and the public Mozilla root certificates distributed in Debian's `ca-certificates` package. Behavioral chain verification should also cover the incident site's separate [twelve published server chains](https://emudhra.we-have-a-problem.com/chains.zip).