56kcloud/lamasar #125
Certificate trust store for Sign & Encrypt security mode
Nicolas Varone opened this issue on Oct 11, 2026 · 11 comments
IT requires Sign & Encrypt on the plant network. The connector needs its own application certificate, a trusted folder for press certificates and a way to approve new ones from the admin page.
Rejected certificates must show up in the connector health view instead of failing silently.
Activity
Unblocked, the firewall rule is in place.
Added tests for the edge cases mentioned above.
Looks good to me, one comment on naming.
Moving this to the next iteration, the connector work comes first.
Demoed in the weekly, the plant manager liked it.
Picked this up, starting with the happy path.
Tried it against the simulator, works for the first three presses.
Can we split the UI part into its own issue?
Pushed a first version, feedback welcome.
Discussed with the Hall B team: they are fine with this approach.
Blocked on access to the staging plant network, asked IT.