mirror of
https://github.com/home-assistant/operating-system.git
synced 2026-07-03 21:15:35 +01:00
f561b241af
Add certificates with new PKI chain to replace the old one. Until May 14th 2028, bundles signed with the old certs will be accepted as well. The transition to the new authority using bundles signed by the new certs is ensured by the intermediate certificate signed by the old CA. This, and the old CA certificates can be removed from the keyring after their expiry. The keyrings no longer contain CRLs, but the validity of the certificates will be shortened to 4 years, as discussed in the linked issue. Closes #4743