On Tue, 2023-08-29 at 20:07 +0100, Richard Hughes wrote:
On Tue, 29 Aug 2023 at 18:54, Simo Sorce <simo(a)redhat.com>
wrote:
> That depends on how you are going to handle re-installs of peers in the
> network where the certificate will start mismatching ...
In event of a mismatch I was going to ignore the peer; in most home
networks there'll be dozens of devices all offering the same data.
Eventually all devices will end up ignoring each other?
> How do you handle certificate expiration ?
At the moment, not, i.e. a 9999 year expiration.
Ugh.
--
Simo Sorce
RHEL Crypto Team
Red Hat, Inc