distorted.lisp: Don't advertise Lets Encrypt certs for submission or IMAP.

[zones] / distorted.lisp

diff --git a/distorted.lisp b/distorted.lisp
index 22f6726..a03fa04 100644 (file)
--- a/distorted.lisp
+++ b/distorted.lisp
@@ -161,13 +161,17 @@
                                      #p"https-stratocaster")))
   (www-cache :tlsa (3127 #1=(:trust-anchor-assertion
                             :certificate :sha-256 #p"distorted-ca")))
-  (mail :tlsa ((:submission :imap :imaps) #1# #3#))
-  (mail :tlsa (:smtp #1#
-              (:domain-issued-certificate
-               :public-key :sha-256 #p"smtps-stratocaster")))
-  ((bugs lists) :tlsa (:smtp #1#
-              (:domain-issued-certificate
-               :public-key :sha-256 #p"smtps-telecaster")))
+  (mail :tlsa ((:submission :imap :imaps) #1#))
+  (mail :tlsa (:smtp
+              #+view/inside #1#
+              #-view/inside (:domain-issued-certificate
+                             :public-key :sha-256
+                             #p"smtps-stratocaster")))
+  ((bugs lists) :tlsa (:smtp
+                      #+view/inside #1#
+                      #-view/inside (:domain-issued-certificate
+                                     :public-key :sha-256
+                                     #p"smtps-telecaster")))
   :svc #+view/inside stratocaster.colo
        #-view/inside stratocaster.jump
   (cabal :svc stratocaster.colo :sshfp "stratocaster")