mirror of
https://github.com/samply/bridgehead.git
synced 2026-10-12 22:56:41 +02:00
cce/vars now enrolls against our own broker, whose Vault minted its own root CA on 2026-09-07 (SHA-256 73:74:A5:2B...:C1:F6). The pinned copy still held the test broker's, so the master bridgehead could not have verified a single proxy certificate. itcc/ and kr/ keep the old file -- they still enroll against test-no-real-data.broker.samply.de.