Why you should update
v1.1.1 (and v1.0.37.4-LTS) replaced the firmware's built-in certificate store after the eMudhra CA compromise. That update was important, but it had an unwanted side effect: TLS connections to servers using Google Trust Services certificates started failing with Failed to verify certificate. Many services use these certificates, including Cloudflare and Google-hosted sites.
In practice this broke:
- Discord alerts: notifications were silently not delivered
- Stratum over TLS to pools whose certificate is issued by Google Trust Services
- other HTTPS connections to such servers, e.g. a custom mempool instance
This release fixes that. The firmware now correctly recognizes these certificates as trusted. No new certificate authorities are added, and the certificate chains from the eMudhra incident are still rejected.
If you use Discord alerts or mine over TLS, please update. Your settings stay as they are.
Also in this release: InfluxDB now supports https:// URLs, Grafana shows the same all-time best difficulty as the dashboard, the Swarm page no longer picks up unrelated devices (e.g. Philips Hue bridges), and there is a new Ocean pool quick link.
What's Changed
- fix(display): resolve OCEAN pool favicon from ocean.xyz by @twofaktor in #752
- Fix (Swarm): Validate miner discovery responses by @VortexRadar in #747
- fix(tls): accept cross-signed roots from the pinned CA bundle by @shufps in #758
- Fix (InfluxDB): Support HTTPS with certificate verification by @VortexRadar in #750
- Fix (InfluxDB): Export the persisted all-time best difficulty by @VortexRadar in #749
Full Changelog: v1.1.1...v1.1.2