mirror of
https://github.com/BookStackApp/BookStack.git
synced 2026-02-08 19:06:06 +03:00
Security audit flags expired certificate - installed by install script? #3799
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @RZR7332 on GitHub (May 11, 2023).
Attempted Debugging
Searched GitHub Issues
Describe the Scenario
While scanning my system with Lynis, it flags a certificate as expired - specifically, /var/www/bookstack/vendor/league/oauth1-client/tests/test_rsa_publickey.pem. I am assuming this is installed as part of the installation script - what is it used for, and is it safe to remove?
I realise this is not a major issue, but for compliance reasons expired certificates should be removed, or at least be replaced by valid certificates.
Exact BookStack Version
23.05.1
Log Content
2023-05-11 12:52:28 Result: certificate /var/www/bookstack/vendor/league/oauth1-client/tests/test_rsa_publickey.pem has been expired
PHP Version
PHP 8.1.2-1ubuntu2.11
Hosting Environment
Ubuntu Server 22.04 LTS, virtual machine, official install script.
@ssddanbrown commented on GitHub (May 11, 2023):
@RZR7332 That file is within the testing data of a sub-dependency. It's not something that would actually be used during runtime.
@RZR7332 commented on GitHub (May 11, 2023):
Thanks Dan. Is it safe to remove or is it required for functionality?
@ssddanbrown commented on GitHub (May 11, 2023):
@RZR7332 I'm sure it's safe to remove. Will likely re-appear every time you update though.
@RZR7332 commented on GitHub (May 11, 2023):
Thanks @ssddanbrown - good enough for me. Appreciate the quick response and support, much appreciated.