Kevin O'Gorman
Kevin O'Gorman
For me it's an open question as to whether reusing the service keys like this is a good idea - if nothing else it seems like they'd need to be...
Yup, tis an easy fix/test, adding to 2.5.0
Deferred for now.
Both of these seem like reasonable additions, thanks @cfm.
Narrator: "it was not." Initial dependency install is failing when trying to sychronize Mono's cert store: ``` #5 654.9 Running hooks in /etc/ca-certificates/update.d...\ #5 654.9 \ #5 656.8 done.\ #5...
There is the (poorly documented) `ossec_from_address` https://docs.securedrop.org/en/stable/ossec_alerts.html#not-receiving-emails which is supposed to address this case - this error is coming from mail.riseup.net in the case above, as mon-prod isn't a valid...
One thing to consider here - that we don't really consider in the current text *either* - is that this will result in the instance's public key being added to...
Currently set in Apache, so you might need special dev-only code to set this in the application, which may or may not be worth it considering the staging environment *does*...
Moving this out of the 2.2.0 milestone (and moving #6192 in) - at this stage it's too ambitious to get it into the next release.
Thanks @zishanmirza! we're looking at updates to the source workflow that would effectively only make the codename available after submission, which is pretty similar to this approach - it's good...