From bfb4ba4d6c63be90bcf4592f931968ec71b642ce Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Chevallier?=
 <raphael.chevallier.ext@numerique.gouv.fr>
Date: Mon, 6 Jul 2026 15:10:23 +0200
Subject: [PATCH 1/2] Add LetsEncrypt certificate for Preprod

---
 vector/src/withpinning/res/xml/network_security_config.xml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/vector/src/withpinning/res/xml/network_security_config.xml b/vector/src/withpinning/res/xml/network_security_config.xml
index 28e72a1ff2..bfb8da0e42 100644
--- a/vector/src/withpinning/res/xml/network_security_config.xml
+++ b/vector/src/withpinning/res/xml/network_security_config.xml
@@ -6,6 +6,7 @@
             <!-- Do not allow system and user certificates by default -->
 
             <!-- Allow only Tchap intermediate certificate authority -->
+            <certificates src="@raw/tchap_preprod_letsencrypt" />
             <certificates src="@raw/harica_tls_root_2021_rsa" />
             <certificates src="@raw/servicesca_rootca" />
             <certificates src="@raw/certignaserviceseurootca" />

From d2a0a221f02451eb63d966f7f66306dd94037932 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Chevallier?= <raphael.chevallier@gmail.com>
Date: Mon, 6 Jul 2026 15:11:34 +0200
Subject: [PATCH 2/2] Add LetsEncrypt certificate for Preprod (add .der file)

---
 .../res/raw/tchap_preprod_letsencrypt.der        | Bin 0 -> 1246 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)
 create mode 100644 vector/src/withpinning/res/raw/tchap_preprod_letsencrypt.der

diff --git a/vector/src/withpinning/res/raw/tchap_preprod_letsencrypt.der b/vector/src/withpinning/res/raw/tchap_preprod_letsencrypt.der
new file mode 100644
index 0000000000000000000000000000000000000000..b7377ec9c8cd924fa8d604bc8678ffd0f5b580e9
GIT binary patch
literal 1246
zcmXqLV!36|#B^u@GZP~dlYrk|l__;9m!~x7wk*}Zx>?eImyJ`a&7<u*FC!y2D}#Za
zA-4f18*?ZNn=n&oupzGjH;BU}%;Fgw<ZdWnzz5<o3$q91=a(o%1{uhS^BS2NSQ;1`
zfI$?HYXRgM85x^enp#E~7^9jeW*`DFkJl%)M7>zSH7~iSvY^C}$AAlBFmq&(kwFuq
z60*A(Ss9p{82K51;#^EkjEoF7FYGB`o0ZjmPIcE}xwY~4D)!%x<$I>fqJL%Q%ZO#s
zr#`MczDDr{`}0i!>f*~c__?z)zYwx&$e&$sf3{!4j*QkHOY*k2A1Lb4n!_T%nP2mh
z`TXC<>;H2vc+<1w!A-uSe>-0B&VN4T*PK~=J{x0pxldeumQ#{ZBCCF`P1IkDR0W5%
z3nf<YPRzGnx+-(S1HFLh+6y}Zx6hu^bxtdD#_B3<x!tu3&KUW!aCB`uefLG_kNtVk
z%Upa5^$-5Zj``*q9W>$JjZf!~USD+AV%hVV7F$2C#4~(bt<mo<b=hp)Qu7Bq>t~o1
zhx@K_o_xqAE_~6?X_LRM$(XTc=f#Yleyi02ZS!|BF*7nSE^d5h(D)i0A+r38jQ?3!
zfHB-=APfvgSydKLfO2TFF|x9<Gcy_pfdqv?iZ~3|fD{uWgMlnajE_Z(MZ`f=SFQ4`
zk;1(Dvx;P|8Ob;DH1Zh8gQS&NBn-qFMD9J0PPm|y>!49<&&&94$=0APfl~~OVCFM2
zvZxuT7%0K`225>Y86_nJR{HvtMS7WfIjO)%*2^zS*M~Sx0pvIX4mP&*Mjl2cMgw(_
zP4X-X266^63#1lEAnQ&>){UA}nVW#VC`ok@OTT|({)IlFS$3-5=NJ`~w0nQx%Rlpa
zkyhLqbG^3i+48ArUxF))gkEpHQqlW~gLm4CPZRn5j|zX>`7U^w_tQ^L*k<Yba&RQC
z>bcI8adg_Je)X!4=gK>FOk1IQuF(GW5re76Jx|0Nv8lE%t6ALQm1de0;>O%$#k+Ai
ziw}#ovZ1<G!f(G8@pXyZmkuz>`5gKd<WaRFd-?<4iq-2pvyaR6#6>fOr`w0OJP3$l
z=9ZLBKeuYtsc_#LpC=dG+#Of)*I`@4gdNjz{>-v(tO+kYcY00jnIg`YbGJNVDi?pR
zDAe+A$yxTr)1rDfx+`xKFFs;8E%VFnc>ZQ>u4VEMwN4+8$$34i`L9D#h=#^huRC#B
za&l`0EP7V5b1SJG)4JaBO7X=5{@aS`(&u)B2X-&olxLRO^Q^d^)i8+t-kKfy=U99%
zu;1b?JnVd+?MrCfe0KXi^7FWgH{Abo<jKoQk=e%m6LQa0Nw070{JH+sNz=|J(k8qg
zRBu-BnCdyI*0e|%zP94HI;G80Dw`*I<J)tqThIM=oGj$FQDIR++@$c;d%W*`Ub8eR
ztvoXE>Pw+B-DiCFnO9%i$70jCAbCS%@K=8}uYEiCj^(eMtyY*2-ute-rbt&X;YfpK
uOZSq4hLa4Z1^!^NbE+y~ZMnAS<MqYH^Y7GazmhT*YWZ?w;`0malWPE+72iDo

literal 0
HcmV?d00001