Ship the intermediate CA in unkin-ca-certificates #177

Merged
benvin merged 1 commits from benvin/ca-intermediate into master 2026-10-02 22:24:22 +10:00

1 Commits

Author SHA1 Message Date
unkin-agent 38902545c7 Ship the intermediate CA in unkin-ca-certificates
ci/woodpecker/pr/build-fedora43 Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/build-fedora42 Pipeline was successful
ci/woodpecker/pr/build-fedora44 Pipeline was successful
ci/woodpecker/pr/build-almalinux8 Pipeline was successful
ci/woodpecker/pr/build-almalinux9 Pipeline was successful
s3.ceph.unkin.net serves a bare leaf issued by the intermediate, so hosts
carrying only the root cannot verify it.

- Fetch pki_int alongside pki_root and anchor it as UNKIN_INTCA_2024.crt
- Fail the build when a fetch errors or returns a non-certificate
- Bump version to 2026.10.2
2026-10-02 22:09:41 +10:00