summaryrefslogtreecommitdiffstats
path: root/roles/IMAP
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2016-06-15 18:08:48 +0200
committerGuilhem Moulin <guilhem@fripost.org>2016-06-15 18:13:09 +0200
commit02d4a5892bb3019d448c453ad279788fcd3f1531 (patch)
treef8e023267ac8af5cab8aa5413c52c37c6d9257af /roles/IMAP
parent97e78349145156ca6565ee5b2af54983a6fdd3a6 (diff)
certs/public: fetch each cert's pubkey (SPKI), not the cert itself.
To avoid new commits upon cert renewal.
Diffstat (limited to 'roles/IMAP')
-rw-r--r--roles/IMAP/tasks/imap.yml2
1 files changed, 1 insertions, 1 deletions
diff --git a/roles/IMAP/tasks/imap.yml b/roles/IMAP/tasks/imap.yml
index a596c42..d7bbfb9 100644
--- a/roles/IMAP/tasks/imap.yml
+++ b/roles/IMAP/tasks/imap.yml
@@ -80,7 +80,7 @@
- name: Fetch Dovecot's X.509 certificate
# Ensure we don't fetch private data
become: False
- fetch_cmd: cmd="openssl x509"
+ fetch_cmd: cmd="openssl x509 -noout -pubkey"
stdin=/etc/dovecot/ssl/imap.fripost.org.pem
dest=certs/public/imap.fripost.org.pem
tags: