thin-edge.io
thin-edge.io copied to clipboard
Upgrade the Azure IoT certificate for CI/CD devices
Describe the bug
Azure is replacing the Baltimore cyber trust cert
with the Digi cert root certificate
.
Once replaced the thin-edge device should connect to the Azure IoT
without any issue.
To Reproduce
Try connecting to the "Azure cloud" using tedge connect az
Expected behavior Should connect successfully and publish the measurements.
Screenshots
Environment (please complete the following information):
- OS [incl. version]
- Hardware [incl. revision]
- System-Architecture [e.g. result of "uname -a"]
- thin-edge.io version [e.g. 0.1.0]
Additional context More information can be found here
I don't think we need something specific action rather than the doc change. https://thin-edge.github.io/thin-edge.io/html/tutorials/connect-azure.html#configure-the-device
sudo tedge config set az.root.cert.path /etc/ssl/certs/Baltimore_CyberTrust_Root.pem
And we can't do it right now, as they are going to apply it from February 2023.
In addition, as of now, we just need to check all self-hosted runners have DigiCert_Global_Root_G2.pem
certificate in /etc/ssl/certs
.