coinos-server.git - coinos server — legacy coinos.io backend (Lightning, on-chain, Liquid)

	Commit message (Collapse)	Author	Age	Files	Lines
*	docker: ghcr.io/coinos/bun, oven/bun with the distrusted emSign G3 root ↵HEAD master	Adam Soltys	15 hours	1	-21/+22
\| \| \| \| \| \| \| \| \|	swapped out bun-distrust.ts now carries the root's DER itself instead of finding it through tls.getCACertificates, so it works on any bun image. Co-Authored-By: Claude Opus 5.5 <[email protected]>
*	base: bun-distrust leaves the binary alone when there's nothing to replace	Adam Soltys	15 hours	1	-2/+4
\| \| \| \|	Co-Authored-By: Claude Opus 5.5 <[email protected]>
*	base: take emSign ECC Root CA - G3 out of bun's built-in root store	Adam Soltys	15 hours	1	-0/+38
	Bun compiles Mozilla's roots into its binary and NODE_USE_SYSTEM_CA only adds to them, so the fixed Debian ca-certificates doesn't reach fetch/tls. docker/bun-distrust.ts overwrites the root's DER in place with a same-length self-signed placeholder (key discarded) at image build time. Drop it once a bun release removes the root itself. Co-Authored-By: Claude Opus 5.5 <[email protected]>