Andrew Ayer on Nostr: Yesterday's Alpine Linux 3.21.1 release prematurely removed Entrust from the trust ...

Yesterday's Alpine Linux 3.21.1 release prematurely removed Entrust from the trust store, breaking TLS connections to servers using Entrust certs. They should have waited until Jan 2, 2026. Unfortunately, they vendor curl's mk-ca-bundle.pl and didn't update it after curl fixed this bug. https://gitlab.alpinelinux.org/alpine/ca-certificates/-/issues/6

Alpine is a popular base image for containers so this has the potential to be disruptive.

Background: https://sslmate.com/blog/post/entrust_distrust_more_disruptive_than_intended