Hardenize Compatibility Issue With Let's Encrypt Certs Using tlsserver (grapheneos.social)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink hide all child comments

We noticed Hardenize (https://www.hardenize.com/) isn't compatible with Let's Encrypt certificates using the recently launched tlsserver profile. See https://letsencrypt.org/docs/profiles/ for details, it mainly drops non-SNI client support. Maybe we have a contact who can get it fixed quickly.

We deployed tlsserver for our services to prepare for shortlived:

https://grapheneos.social/@GrapheneOS/114452845473608945

We didn't deploy it for SMTP because too many mail servers likely still lack SNI support. For SUPL, we did a hybrid deployment until we're ready to drop 4th/5th gen Pixel support.

no comments (yet)

sorted by: hot top new old

there doesn't seem to be anything here

this post was submitted on 12 May 2025

4 points (100.0% liked)

GrapheneOS [Unofficial]

2593 readers

2 users here now

Welcome to the GrapheneOS (Unofficial) community

This feed is currently only used for announcements and news.

Official support available on our forum and matrix chat rooms

GrapheneOS is a privacy and security focused mobile OS with Android app compatibility.

Links