No? Why?

I don’t want to defend Israel, but their current war is a defensive one, no?

I use synphonium with my jellying server, works just fine.

deleted by creator

It’s just that there are lots of stuff that don’t really work (out of the box) with Wayland systems, an example being getting an IME with ibus/fcitx5 to work in browsers.

I found open-ssl to be much harder to use. Do you just manually make new certificates with the CA in CLI?

At some point it’s good to let things die

In that case, i recommend step-ca, which is a certificate authority server with acme support anyone can self host. The setup took a while but it’s been running for months now without problems for me.

No proper CA should give out a certificate for an IP, that’s a no go by the common rules.

The background is that certificate revocation is a broken system and having short lived certificates makes the problem go away. You don’t need to worry about how to tell people that some certificate is bad if it’s only valid for a few days.

Ideally, certificates would only be valid for a few days, it should be automated anyway. This has other downsides as I can imagine, like creation of more traffic. My self signed CA for my home LAN has 4 days as standard, and it works perfectly fine.

While true I feel like your comment misses the point. A raspberry pi is just a computer, not a magic solution box that’s kept maintained and updated by some guy. Their product isn’t a service, it’s just the device.