summaryrefslogtreecommitdiffstats
path: root/roles/lists/templates/etc/postfix/relay_clientcerts.j2
diff options
context:
space:
mode:
Diffstat (limited to 'roles/lists/templates/etc/postfix/relay_clientcerts.j2')
-rw-r--r--roles/lists/templates/etc/postfix/relay_clientcerts.j26
1 files changed, 6 insertions, 0 deletions
diff --git a/roles/lists/templates/etc/postfix/relay_clientcerts.j2 b/roles/lists/templates/etc/postfix/relay_clientcerts.j2
new file mode 100644
index 0000000..42a83b5
--- /dev/null
+++ b/roles/lists/templates/etc/postfix/relay_clientcerts.j2
@@ -0,0 +1,6 @@
+# {{ ansible_managed }}
+# /!\ WARNING: smtp_tls_fingerprint_digest MUST be sha256!
+
+{% for h in groups.MX | difference([inventory_hostname]) | sort %}
+{{ lookup('pipe', 'openssl x509 -in certs/postfix/'+h+'.pem -noout -fingerprint -sha256 | cut -d= -f2') }} {{ h }}
+{% endfor %}