mirror of
https://github.com/rubenhensen/k8scd.git
synced 2026-11-15 22:29:09 +01:00
Node uses its built-in roots, which still include emSign ECC Root CA - G3, and the Node fix is still pending. Switch to OpenSSL's store with --use-openssl-ca and point it at patched-ca-bundle, mounted over /etc/ssl/certs. That covers bank sync and the authentik OIDC calls.