mirror of
https://github.com/GrapheneOS/infrastructure.git
synced 2025-08-21 12:38:07 -04:00
Shared server infrastructure - https://grapheneos.org/articles/grapheneos-servers
90a7780b5e
We can no longer use OCSP stapling and Must-Staple. These will soon be obsolete once the `shortlived` profile is available for public use since it will provide certificates with a similar lifetime as OCSP responses. In the meantime, we've moved to the `tlsserver` profile stripping legacy features to prepare for the `shortlived` profile which will be identical to `tlsserver` but with a validity period of 6 days. The certificate for SUPL is still temporarily using the classic profile to work around the older generations of end-of-life Snapdragon Pixels not having support for SNI. We can eventually drop support for these devices from the SUPL service to allow us to disable TLSv1.1, DHE and move to the `tlsserver` or `shortlived` profile. The certificate for SMTP is still temporarily using the classic profile to avoid potential compatibility issues with servers supporting TLSv1.2 but still not yet supporting SNI. |
||
|---|---|---|
| .github | ||
| boot/loader | ||
| certbot | ||
| etc | ||
| guide | ||
| home/.config | ||
| packages | ||
| .gitignore | ||
| connection-stats | ||
| count | ||
| deploy-initial | ||
| disconnect | ||
| dns-stats | ||
| fetch-info | ||
| for | ||
| hosts.sh | ||
| LICENSE | ||
| nginx-create-session-ticket-keys | ||
| nginx-rotate-session-ticket-keys | ||
| nginx-stats | ||
| ovh-mitigation | ||
| ovh-mitigation.py | ||
| README.md | ||
| reboot | ||
| requirements.in | ||
| requirements.txt | ||
| setup | ||
Information about GrapheneOS servers is available in the GrapheneOS servers article on grapheneos.org.