From 5a8c792f8342eb3fd1852e54baaf9120afd92bd8 Mon Sep 17 00:00:00 2001 From: Mark Wooding Date: Wed, 27 Jan 2016 14:28:24 +0000 Subject: [PATCH] distorted.lisp: Roll out LetsEncrypt certificates for other services. Now Git and webmail services use certificates which external users might actually believe. --- distorted.lisp | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/distorted.lisp b/distorted.lisp index da00125..3b0b297 100644 --- a/distorted.lisp +++ b/distorted.lisp @@ -147,11 +147,11 @@ (jump :svc telecaster.jump :sshfp "telecaster")) ((git www mail) (colo :svc stratocaster.colo :sshfp "stratocaster") (jump :svc stratocaster.jump :sshfp "stratocaster")) - ((www @) :tlsa (:https (:service-certificate-constraint - :public-key :sha-256 #p"https-stratocaster"))) - ((git mail) :tlsa (:https #1=(:trust-anchor-assertion - :certificate :sha-256 #p"distorted-ca"))) - (www-cache :tlsa (3127 #1#)) + ((www git mail @) :tlsa (:https (:service-certificate-constraint + :public-key :sha-256 + #p"https-stratocaster"))) + (www-cache :tlsa (3127 #1=(:trust-anchor-assertion + :certificate :sha-256 #p"distorted-ca"))) ((bugs lists) :tlsa (:smtp #1#)) (mail :tlsa ((:smtp :submission :imap :imaps) #1#)) :svc #+view/inside stratocaster.colo -- 2.11.0