One bus: the runtime pins the certificate after the server speaks, and the old transport goes #15

2026-09-28T01:09:01Z

mesh-admin commented

2026-09-28 01:09:01 +00:00

No description provided.

mesh-admin added 1 commit 2026-09-28 01:09:01 +00:00

One bus: the runtime pins the certificate after the server speaks, and the old transport goes f0104b7846

Every module that dialled the new bus failed its handshake with "wrong version
number": the runtime pinned the server's certificate by a raw TLS connection to a
port on which the server speaks first, in the clear. The pin is taken after the
INFO line now, on the same socket, and then the real connection verifies against
exactly that certificate.

And the old transport is deleted — its client, its tests, its dependency — with
the wire-compatibility pins that only existed for the move (novox/hq ADR 0131,
design 28 task 5.5). A credential names the bus, and there is one.

mesh-admin merged commit 8acfa7a07d into main

2026-09-28 01:09:02 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/mesh-tools#15