No, the OpenVPN certs for Tesla are now useless and will eventually expire. For v8 users no more connexion to the mothership. This means no more firmware updates (obviously being ignored anyway) and no more map updates. And if you are amongst the anointed, no more app functionality, but then we few on v8 are unlikely to have the Tesla app anyway.
I've been mulling over a move to v10 as there seems to be a general acceptance of it, including by vg which is compelling. I don't need
websocket (aka "hermes"), the replacement for OpenVPN, as I need nothing from Tesla (except map updates, which I can get by other means... if only someone with root will help).
With an upgrade I am concerned though about losing access to the gateway, which happens as you move into v9 territory. Given enough time (which I don't have) I may be able to work around that. (I recently had a problem where I was forced to work out how to get in to the CID through the gateway, and thank goodness that was possible -- and sorry, can not share that. Although... Tesla knows most of our secrets anyway, if we're real about it)
But it seems that all told, moving to v10 might just be a headache with no substantive reward that I can discern, at least for MCU1, and most especially with MCU2 and up due to dm-verity. There is a crack for dm-verity but I could not write an article on it as then it would be 'fixed'. If there's a fatal compromise for it I could publish; but I don't have an MCU2+ car so am not working on it. Maybe I'll resist this 'firmware envy', Fart app notwithstanding. unless there is a good countervailing argument.
I am very happy to have WireGuard compiled and working on the CID though. And I am very happy about my shiny new
PPP loan -- three days to approval. I still can't believe it. Thank goodness for Covid-19, lol.