Nitrokey HSM2 firmware can be updated via remote access to the external infrastructure.
Can this be done via the HTTP/HTTPS proxy? If yes, which domain names are used?
I need to whitelist the domain names used during the update process on my proxy to allow such access.
Updates are provided via https://www.pki-as-a-service.net. The client validates the Let’s encrypt server certificate. You could add your intermediate certificate of a proxy if needed (working, but of course not recommended).
