Skip to content

Conversation

@dstathis
Copy link
Contributor

@dstathis dstathis commented Jul 9, 2025

This improves upon #124 to make it backwards compatible with older revisions of self-signed-certificates. It does this by checking if the leaf is first, and if not, reversing the chain.

@dstathis dstathis requested a review from a team as a code owner July 9, 2025 11:54
@MichaelThamm
Copy link

Prior to this PR being merged, the working version combinations are:

Traefik rev237 & SSC >=rev309
Traefik <=rev236 & SSC <=rev308

What will be the compatible version ocmbinations after merging?

@lucabello lucabello changed the title make the chain order fix backwards compatible feat: make the chain order fix backwards compatible Jul 11, 2025
@dstathis
Copy link
Contributor Author

Prior to this PR being merged, the working version combinations are:

Traefik rev237 & SSC >=rev309
Traefik <=rev236 & SSC <=rev308

What will be the compatible version ocmbinations after merging?

This revision of Traefik will be compatible with all versions of SSC.

Copy link

@MichaelThamm MichaelThamm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@dstathis dstathis merged commit 37e2e87 into main Jul 14, 2025
18 checks passed
@dstathis dstathis deleted the cert_handler_chain_order branch July 14, 2025 12:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants