#68108 closed defect (fixed)

lastpass-cli @1.3.4 is broken due to certificate pinning

Reported by: fs111 (André Kelpe) Owned by: Raimondi (Israel Chauca Fuentes)
Priority: Normal Milestone:
Component: ports Version:
Keywords: Cc: mni@…, kurthindenburg (Kurt Hindenburg)
Port: lastpass-cli

Description

lastpass-cli apparently does certificate pinning, meaning they have to change the code every time the certificates on lastpass.com are rotated. The certs have been rotated and therefore all old releases are broken. The new release 1.3.5 has a fix:

new release: https://github.com/lastpass/lastpass-cli/releases/tag/v1.3.5

the commit: https://github.com/lastpass/lastpass-cli/commit/11cc281498027da39bd7ec3ddd2c0bbf8dc46083

I also opened a bug that they stop the pinning: https://github.com/lastpass/lastpass-cli/issues/657

Change History (2)

comment:1 Changed 15 months ago by ryandesign (Ryan Carsten Schmidt)

Cc: mni@… kurthindenburg added
Owner: set to Raimondi
Status: newassigned
Summary: lastpass-cli 1.3.4 is broken due to certificate pinninglastpass-cli @1.3.4 is broken due to certificate pinning

comment:2 Changed 15 months ago by kurthindenburg (Kurt Hindenburg)

Resolution: fixed
Status: assignedclosed

I just updated this a few hours ago.

Note: See TracTickets for help on using tickets.