Files
cozystack/packages
Arsolitt 83852538e3 refactor(mariadb): switch CA and leaf private keys to ECDSA P-256
ECDSA P-256 keys offer equivalent or better security than RSA-4096 with
significantly smaller key material and faster handshake operations. Both
CA and leaf certificates are updated; existing rotation policies are
preserved (Never for CA, Always for leaf).

Note: cert-manager will re-issue both CA and leaf on next reconcile.
Existing trust anchors that pin the CA cert will break; tenants must
refresh their ca.crt after upgrading.

Assisted-by: LLM
Signed-off-by: Arsolitt <arsolitt@gmail.com>
2026-09-03 01:38:30 +03:00
..