From fd848debb8306fc514bcceda4119ec85ae416fb8 Mon Sep 17 00:00:00 2001 From: Mark Wooding Date: Wed, 27 Jan 2016 13:53:50 +0000 Subject: [PATCH] distorted.lisp: Avoid repeating the tedious details for our internal CA. Unfortunately, the best approach at the moment appears to be using the `#n=' and `#n#' reader macros, which is rather bletcherous. Sorry. --- distorted.lisp | 14 +++++--------- 1 file changed, 5 insertions(+), 9 deletions(-) diff --git a/distorted.lisp b/distorted.lisp index adc8f24..0277696 100644 --- a/distorted.lisp +++ b/distorted.lisp @@ -149,15 +149,11 @@ (jump :svc stratocaster.jump :sshfp "stratocaster")) ((www @) :tlsa (:https (:service-certificate-constraint :certificate :sha-256 #p"http-server-www#1"))) - ((git mail) :tlsa (:https (:trust-anchor-assertion - :certificate :sha-256 #p"distorted-ca"))) - (www-cache :tlsa (3127 (:trust-anchor-assertion - :certificate :sha-256 #p"distorted-ca"))) - ((bugs lists) :tlsa (:smtp (:trust-anchor-assertion - :certificate :sha-256 #p"distorted-ca"))) - (mail :tlsa ((:smtp :submission :imap :imaps) - (:trust-anchor-assertion - :certificate :sha-256 #p"distorted-ca"))) + ((git mail) :tlsa (:https #1=(:trust-anchor-assertion + :certificate :sha-256 #p"distorted-ca"))) + (www-cache :tlsa (3127 #1#)) + ((bugs lists) :tlsa (:smtp #1#)) + (mail :tlsa ((:smtp :submission :imap :imaps) #1#)) :svc #+view/inside stratocaster.colo #-view/inside stratocaster.jump (cabal :svc stratocaster.colo :sshfp "stratocaster") -- 2.11.0