Support for new root chain by letsencrypt #552

New Issue

adam · 2025-12-29T01:27:08+01:00

adam commented

2025-12-29 01:27:08 +01:00

Originally created by @whizzygeeks on GitHub (Oct 2, 2021).

Update root chain with new ones specified in https://letsencrypt.org/certificates/

Originally created by @whizzygeeks on GitHub (Oct 2, 2021). Update root chain with new ones specified in https://letsencrypt.org/certificates/

adam closed this issue

2025-12-29 01:27:08 +01:00

adam commented

2025-12-29 01:27:09 +01:00

@lukas2511 commented on GitHub (Oct 2, 2021):

Dehydrated doesn't have hardcoded chains. It uses the chain as provided by the CA. You can even select alternate chains the CA is offering using the PREFERRED_CHAIN config value or the --preferred-chain CLI option.

@lukas2511 commented on GitHub (Oct 2, 2021): Dehydrated doesn't have hardcoded chains. It uses the chain as provided by the CA. You can even select alternate chains the CA is offering using the `PREFERRED_CHAIN` config value or the `--preferred-chain` CLI option.

adam commented

2025-12-29 01:27:09 +01:00

@grinapo commented on GitHub (Oct 3, 2021):

While you're right, Lukas, this probably should be put on the top of readme (both github and else) since it does bite almost everyone providing external certs. The full compatible chain (with expired signed X1) fails on any embedded crap (like TVs) as well as many clients using openssl 1.0.xx.
As a community service, instead of letting them find it in closed issues. :-)

Also, solution is spelled out in #842 .

@grinapo commented on GitHub (Oct 3, 2021): While you're right, Lukas, this probably should be put on the top of readme (both github and else) since it **does bite almost everyone** providing external certs. The full compatible chain (with expired signed X1) fails on any embedded crap (like TVs) as well as _many_ clients using openssl 1.0.xx. As a community service, instead of letting them find it in closed issues. :-) Also, solution is spelled out in #842 .

adam commented

2025-12-29 01:27:10 +01:00

@whizzygeeks commented on GitHub (Nov 19, 2021):

Dehydrated doesn't have hardcoded chains. It uses the chain as provided by the CA. You can even select alternate chains the CA is offering using the PREFERRED_CHAIN config value or the --preferred-chain CLI option.

Thanks , readme is not very clear with this

@whizzygeeks commented on GitHub (Nov 19, 2021): > > > Dehydrated doesn't have hardcoded chains. It uses the chain as provided by the CA. You can even select alternate chains the CA is offering using the `PREFERRED_CHAIN` config value or the `--preferred-chain` CLI option. Thanks , readme is not very clear with this

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/dehydrated#552