distorted.lisp: Do the split-horizon thing for TLSA records.
authorMark Wooding <mdw@distorted.org.uk>
Wed, 4 Jul 2018 17:44:40 +0000 (18:44 +0100)
committerMark Wooding <mdw@distorted.org.uk>
Wed, 4 Jul 2018 17:44:40 +0000 (18:44 +0100)
distorted.lisp

index 22f6726..59a3768 100644 (file)
   (www-cache :tlsa (3127 #1=(:trust-anchor-assertion
                             :certificate :sha-256 #p"distorted-ca")))
   (mail :tlsa ((:submission :imap :imaps) #1# #3#))
-  (mail :tlsa (:smtp #1#
-              (:domain-issued-certificate
-               :public-key :sha-256 #p"smtps-stratocaster")))
-  ((bugs lists) :tlsa (:smtp #1#
-              (:domain-issued-certificate
-               :public-key :sha-256 #p"smtps-telecaster")))
+  (mail :tlsa (:smtp
+              #+view/inside #1#
+              #-view/inside (:domain-issued-certificate
+                             :public-key :sha-256
+                             #p"smtps-stratocaster")))
+  ((bugs lists) :tlsa (:smtp
+                      #+view/inside #1#
+                      #-view/inside (:domain-issued-certificate
+                                     :public-key :sha-256
+                                     #p"smtps-telecaster")))
   :svc #+view/inside stratocaster.colo
        #-view/inside stratocaster.jump
   (cabal :svc stratocaster.colo :sshfp "stratocaster")