KUSANAGI 9 update 9.6.3-1

KUSANAGI 9 update 9.6.3-1

KUSANAGI 9 update has been released.

The --ct, --no-register, and --noregister options of the kusanagi ssl command have been obsoleted.

SSL Certification Trancparency (CT) is a mechanism to detect if a fraudulent SSL certificate has been issued by registering with the CT log server.
However, there are cases where publicly available CT log servers have been abused to attack servers based on newly registered SSL certificates.
In order to mitigate against malicious access immediately after the provision of KUSANAGI, we have decided to discontinue the CT option.

You can apply the module update with the following command:

# dnf upgrade

The specification for Nginx has been changed since KUSANAGI 9.5.0 release.
For details, please refer to Changes in KUSANAGI 9.5.0 .