summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2021-01-07 22:21:54 +0100
committerGuilhem Moulin <guilhem@fripost.org>2021-01-07 22:22:21 +0100
commit088b761d6b25e4978f0e9cca6279c25b465b2b6f (patch)
tree4679ad517d149cbdaa4c144878c51d5d7adb08df
parent0e13f4478f795dbce96932302ceedc94249b479c (diff)
cert page: Don't hard-code the intermediate CA.
Since mid December Let's Encrypt has been using /C=US/O=Let's Encrypt/CN=R3 (CAID #183267) instead of the old /C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 (CAID #16418).
-rw-r--r--website/certs.asc50
-rw-r--r--website/certs.mdwn22
2 files changed, 36 insertions, 36 deletions
diff --git a/website/certs.asc b/website/certs.asc
index 1cb6477..176e052 100644
--- a/website/certs.asc
+++ b/website/certs.asc
@@ -9,10 +9,10 @@ admin@fripost.org
These certificates are all issued by the Let's Encrypt Certificate
-Authority, and are submitted to Certificate Transparency logs. You can
-view all issued Let's Encrypt certificates at crt.sh:
+Authority, and are submitted to Certificate Transparency logs. You can
+view all issued certificates at crt.sh:
- https://crt.sh/?Identity=%25fripost.org&iCAID=16418
+ https://crt.sh/?Identity=fripost.org
The SPKI of our X.509 certificates are also available in PEM format at:
@@ -27,7 +27,7 @@ IMAP server
imap.fripost.org:993 (IMAP over TLS), sieve.fripost.org:4190 (ManageSieve, STARTTLS)
-: X.509: https://crt.sh/?spkisha256=60db1731fcf1f860de7e84c1a2c48cb9cded004750b21fbf67616b13e8ad7de5&iCAID=16418&exclude=expired
+: X.509: https://crt.sh/?spkisha256=60db1731fcf1f860de7e84c1a2c48cb9cded004750b21fbf67616b13e8ad7de5&exclude=expired
SPKI:
SHA1 79:EE:C2:1B:9B:5A:67:D8:1F:DF:D2:F5:2A:A3:68:EB:02:FF:5A:F2
SHA256 YNsXMfzx+GDefoTBosSMuc3tAEdQsh+/Z2FrE+itfeU=
@@ -37,21 +37,21 @@ SMTP servers
smtp.fripost.org:465 (Email Submission over TLS), smtp.fripost.org:587 (Email Submission, STARTTLS)
-: X.509: https://crt.sh/?spkisha256=a2726ec6514d6670aaf49008c17a3f28f92ee981e530d10e19d6847ceaa3c905&iCAID=16418&exclude=expired
+: X.509: https://crt.sh/?spkisha256=a2726ec6514d6670aaf49008c17a3f28f92ee981e530d10e19d6847ceaa3c905&exclude=expired
SPKI:
SHA1 A7:DB:17:4B:55:94:7B:8F:BB:90:5F:BC:48:CC:99:FD:29:73:C7:D8
SHA256 onJuxlFNZnCq9JAIwXo/KPku6YHlMNEOGdaEfOqjyQU=
mx1.fripost.org:25 (1st Mail eXchange, STARTTLS)
-: X.509: https://crt.sh/?spkisha256=63c2a1dce0bc20a6cde16eae1cec71cf42270d1e460f039dc2fdea1e274870ba&iCAID=16418&exclude=expired
+: X.509: https://crt.sh/?spkisha256=63c2a1dce0bc20a6cde16eae1cec71cf42270d1e460f039dc2fdea1e274870ba&exclude=expired
SPKI:
SHA1 DF:D7:33:FB:96:EC:39:58:4E:31:05:35:E0:DF:EA:59:27:90:D4:0D
SHA256 Y8Kh3OC8IKbN4W6uHOxxz0InDR5GDwOdwv3qHidIcLo=
mx2.fripost.org:25 (2nd Mail eXchange, STARTTLS)
-: X.509: https://crt.sh/?spkisha256=9307b7878124e4e79f9871ee88cb9d4a82ea9e7c27065a21a81d902567a8d27a&iCAID=16418&exclude=expired
+: X.509: https://crt.sh/?spkisha256=9307b7878124e4e79f9871ee88cb9d4a82ea9e7c27065a21a81d902567a8d27a&exclude=expired
SPKI:
SHA1 A0:85:B9:51:9F:F1:71:3C:F6:61:C1:6A:7E:DC:F4:91:8A:64:32:11
SHA256 kwe3h4Ek5OefmHHuiMudSoLqnnwnBlohqB2QJWeo0no=
@@ -61,7 +61,7 @@ Web servers
fripost.org:443, www.fripost.org:443 (website), wiki.fripost.org:443 (wiki)
-: X.509: https://crt.sh/?spkisha256=7d0fa06aeef68b039feab997bd8eff41e981fa46218b13c263f03f108af76adb&iCAID=16418&exclude=expired
+: X.509: https://crt.sh/?spkisha256=7d0fa06aeef68b039feab997bd8eff41e981fa46218b13c263f03f108af76adb&exclude=expired
SPKI:
SHA1 B8:CB:E1:30:7E:BA:03:C3:DB:BE:BF:65:FD:80:68:F8:D3:E0:1C:7D
SHA256 fQ+gau72iwOf6rmXvY7/QemB+kYhixPCY/A/EIr3ats=
@@ -70,7 +70,7 @@ fripost.org:443, www.fripost.org:443 (website), wiki.fripost.org:443 (wiki)
mail.fripost.org:443, webmail.fripost.org:443 (webmail)
-: X.509: https://crt.sh/?spkisha256=4877e788c11aa71798a39613ff68cffa7f96b2d35a62084332165469d2e53c39&iCAID=16418&exclude=expired
+: X.509: https://crt.sh/?spkisha256=4877e788c11aa71798a39613ff68cffa7f96b2d35a62084332165469d2e53c39&exclude=expired
SPKI:
SHA1 4F:E7:42:40:98:35:51:CF:93:65:EF:F2:D1:7C:3C:46:60:64:2C:30
SHA256 SHfniMEapxeYo5YT/2jP+n+WstNaYghDMhZUadLlPDk=
@@ -79,7 +79,7 @@ mail.fripost.org:443, webmail.fripost.org:443 (webmail)
lists.fripost.org:443 (list manager)
-: X.509: https://crt.sh/?spkisha256=38bc7584e12a9c2752ffb660cd3cc097c220fc2c29cf9318f49f458ac860ebfd&iCAID=16418&exclude=expired
+: X.509: https://crt.sh/?spkisha256=38bc7584e12a9c2752ffb660cd3cc097c220fc2c29cf9318f49f458ac860ebfd&exclude=expired
SPKI:
SHA1 E9:45:89:19:95:44:B1:C7:61:C1:75:4B:A1:3F:8C:38:D4:10:A5:33
SHA256 OLx1hOEqnCdS/7ZgzTzAl8Ig/Cwpz5MY9J9Fishg6/0=
@@ -88,7 +88,7 @@ lists.fripost.org:443 (list manager)
git.fripost.org:443 (git server and its web interface)
-: X.509: https://crt.sh/?spkisha256=1cea225e00bbb68973677d5beb95336c02a1a42080ec8d2235d3bb344b8bd255&iCAID=16418&exclude=expired
+: X.509: https://crt.sh/?spkisha256=1cea225e00bbb68973677d5beb95336c02a1a42080ec8d2235d3bb344b8bd255&exclude=expired
SPKI:
SHA1 02:D7:7C:F0:16:F4:55:0D:C3:6B:A1:C4:B6:95:1B:65:26:64:C8:28
SHA256 HOoiXgC7tolzZ31b65UzbAKhpCCA7I0iNdO7NEuL0lU=
@@ -97,7 +97,7 @@ git.fripost.org:443 (git server and its web interface)
cloud.fripost.org:443 (lagring för delning)
-: X.509: https://crt.sh/?spkisha256=646f81c006a9bd6a43bbfeb56ab20db829427589dcf13cc24d2036724b5be8cf&iCAID=16418&exclude=expired
+: X.509: https://crt.sh/?spkisha256=646f81c006a9bd6a43bbfeb56ab20db829427589dcf13cc24d2036724b5be8cf&exclude=expired
SPKI:
SHA1 8F:D6:E2:F1:C8:88:BD:18:83:D7:70:55:D6:A2:D3:89:38:F7:F9:31
SHA256 ZG+BwAapvWpDu/61arINuClCdYnc8TzCTSA2cktb6M8=
@@ -116,17 +116,17 @@ gitolite@git.fripost.org:22
-----BEGIN PGP SIGNATURE-----
-iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAlyQTmQACgkQ05pJnDwh
-pVJrTw/+LfIRfMyh21hsjnqP7SLbin2SltHdb0w+n3mWC9cjbLg/ODyodSoqRGRL
-Xnj3hAjTSnYZ8ROJ0d8vVbOmHsFF6Jb0HqiRi6evOb1K2su0Z04OME7u//SxKC2l
-IR7HH+Qw37mNN0YadV0SjRiGQTlSjZxbXVk4uIvR4k6u1mVz3USmFY4RQjWLm7hc
-vg2Tzji1cBQQP/pJV5DG5JmVTI6u65X/gfIIJIzSTUuZ1uVtd/KkbyXVWQDh16nD
-OcnlYBCVYVUD8onm/QGRcajJBu5ife/2iZXFHVQh2/xR9u5K9rVHcWTcbNWMmVbX
-bbyUwQmqg3E7UxShKWtjMBh047xIf2+mOuNcyPvsD/ZtAepqfdp6zf6cncJbnYse
-9URlF/d8MwmV3K4JLr1pfCFl5+Zaj7U+CziM/lHxgi446dYY8t/xMMjsHqWhiERx
-D3ZX86nrpGmLu78o4cYAjoSsGDQTrG8d9+js4+uV//9lgFDFx72tnVUO8VMwrz/A
-yh2UW2WDdGPxHYtI5r7k4Rua56cbGB/4iWmi93wet56O1EPeB52uCN+g1KF41KON
-F+d2LtyC7e8b8IIh85wHn9zIOiPVShRkmdR2+YFjSfRgVfhqAJWLwHmd6fFJhAj8
-+LO8Wo1bCljnc8wg/Ac9xunOa3Uohb8GFRLQgbWWqhbfEha7bTs=
-=vZfN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+=svPW
-----END PGP SIGNATURE-----
diff --git a/website/certs.mdwn b/website/certs.mdwn
index f5c415d..27b72e6 100644
--- a/website/certs.mdwn
+++ b/website/certs.mdwn
@@ -11,8 +11,8 @@ the [signed version of this page](/certs.asc).)
These certificates are all issued by the [Let's Encrypt Certificate
Authority](https://letsencrypt.org), and are submitted to [Certificate
Transparency logs](https://www.certificate-transparency.org).
-You can view all issued Let's Encrypt certificates at
-[crt.sh](https://crt.sh/?Identity=%25fripost.org&iCAID=16418).
+You can view all issued certificates at
+[crt.sh](https://crt.sh/?Identity=fripost.org).
The SPKI of our X.509 certificates are also available in PEM format
under our [Git repository](https://git.fripost.org/fripost-ansible/tree/certs/public),
from which this fingerprint list was [generated](https://git.fripost.org/fripost-ansible/tree/certs/gencerts.sh), at
@@ -21,51 +21,51 @@ from which this fingerprint list was [generated](https://git.fripost.org/fripost
### IMAP server ###
-[`imap.fripost.org:993` (IMAP over TLS), `sieve.fripost.org:4190` (ManageSieve, `STARTTLS`)](https://crt.sh/?spkisha256=60db1731fcf1f860de7e84c1a2c48cb9cded004750b21fbf67616b13e8ad7de5&iCAID=16418&exclude=expired)
+[`imap.fripost.org:993` (IMAP over TLS), `sieve.fripost.org:4190` (ManageSieve, `STARTTLS`)](https://crt.sh/?spkisha256=60db1731fcf1f860de7e84c1a2c48cb9cded004750b21fbf67616b13e8ad7de5&exclude=expired)
: SHA1 79:EE:C2:1B:9B:5A:67:D8:1F:DF:D2:F5:2A:A3:68:EB:02:FF:5A:F2
SHA256 YNsXMfzx+GDefoTBosSMuc3tAEdQsh+/Z2FrE+itfeU=
### SMTP servers ###
-[`smtp.fripost.org:465` (Email Submission over TLS), `smtp.fripost.org:587` (Email Submission, `STARTTLS`)](https://crt.sh/?spkisha256=a2726ec6514d6670aaf49008c17a3f28f92ee981e530d10e19d6847ceaa3c905&iCAID=16418&exclude=expired)
+[`smtp.fripost.org:465` (Email Submission over TLS), `smtp.fripost.org:587` (Email Submission, `STARTTLS`)](https://crt.sh/?spkisha256=a2726ec6514d6670aaf49008c17a3f28f92ee981e530d10e19d6847ceaa3c905&exclude=expired)
: SHA1 A7:DB:17:4B:55:94:7B:8F:BB:90:5F:BC:48:CC:99:FD:29:73:C7:D8
SHA256 onJuxlFNZnCq9JAIwXo/KPku6YHlMNEOGdaEfOqjyQU=
-[`mx1.fripost.org:25` (1st Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha256=63c2a1dce0bc20a6cde16eae1cec71cf42270d1e460f039dc2fdea1e274870ba&iCAID=16418&exclude=expired)
+[`mx1.fripost.org:25` (1st Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha256=63c2a1dce0bc20a6cde16eae1cec71cf42270d1e460f039dc2fdea1e274870ba&exclude=expired)
: SHA1 DF:D7:33:FB:96:EC:39:58:4E:31:05:35:E0:DF:EA:59:27:90:D4:0D
SHA256 Y8Kh3OC8IKbN4W6uHOxxz0InDR5GDwOdwv3qHidIcLo=
-[`mx2.fripost.org:25` (2nd Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha256=9307b7878124e4e79f9871ee88cb9d4a82ea9e7c27065a21a81d902567a8d27a&iCAID=16418&exclude=expired)
+[`mx2.fripost.org:25` (2nd Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha256=9307b7878124e4e79f9871ee88cb9d4a82ea9e7c27065a21a81d902567a8d27a&exclude=expired)
: SHA1 A0:85:B9:51:9F:F1:71:3C:F6:61:C1:6A:7E:DC:F4:91:8A:64:32:11
SHA256 kwe3h4Ek5OefmHHuiMudSoLqnnwnBlohqB2QJWeo0no=
### Web servers ###
-[`fripost.org:443`, `www.fripost.org:443` (website), `wiki.fripost.org:443` (wiki)](https://crt.sh/?spkisha256=7d0fa06aeef68b039feab997bd8eff41e981fa46218b13c263f03f108af76adb&iCAID=16418&exclude=expired)
+[`fripost.org:443`, `www.fripost.org:443` (website), `wiki.fripost.org:443` (wiki)](https://crt.sh/?spkisha256=7d0fa06aeef68b039feab997bd8eff41e981fa46218b13c263f03f108af76adb&exclude=expired)
: SHA1 B8:CB:E1:30:7E:BA:03:C3:DB:BE:BF:65:FD:80:68:F8:D3:E0:1C:7D
SHA256 fQ+gau72iwOf6rmXvY7/QemB+kYhixPCY/A/EIr3ats=
-[`mail.fripost.org:443`, `webmail.fripost.org:443` (webmail)](https://crt.sh/?spkisha256=4877e788c11aa71798a39613ff68cffa7f96b2d35a62084332165469d2e53c39&iCAID=16418&exclude=expired)
+[`mail.fripost.org:443`, `webmail.fripost.org:443` (webmail)](https://crt.sh/?spkisha256=4877e788c11aa71798a39613ff68cffa7f96b2d35a62084332165469d2e53c39&exclude=expired)
: SHA1 4F:E7:42:40:98:35:51:CF:93:65:EF:F2:D1:7C:3C:46:60:64:2C:30
SHA256 SHfniMEapxeYo5YT/2jP+n+WstNaYghDMhZUadLlPDk=
-[`lists.fripost.org:443` (list manager)](https://crt.sh/?spkisha256=38bc7584e12a9c2752ffb660cd3cc097c220fc2c29cf9318f49f458ac860ebfd&iCAID=16418&exclude=expired)
+[`lists.fripost.org:443` (list manager)](https://crt.sh/?spkisha256=38bc7584e12a9c2752ffb660cd3cc097c220fc2c29cf9318f49f458ac860ebfd&exclude=expired)
: SHA1 E9:45:89:19:95:44:B1:C7:61:C1:75:4B:A1:3F:8C:38:D4:10:A5:33
SHA256 OLx1hOEqnCdS/7ZgzTzAl8Ig/Cwpz5MY9J9Fishg6/0=
-[`git.fripost.org:443` (git server and its web interface)](https://crt.sh/?spkisha256=1cea225e00bbb68973677d5beb95336c02a1a42080ec8d2235d3bb344b8bd255&iCAID=16418&exclude=expired)
+[`git.fripost.org:443` (git server and its web interface)](https://crt.sh/?spkisha256=1cea225e00bbb68973677d5beb95336c02a1a42080ec8d2235d3bb344b8bd255&exclude=expired)
: SHA1 02:D7:7C:F0:16:F4:55:0D:C3:6B:A1:C4:B6:95:1B:65:26:64:C8:28
SHA256 HOoiXgC7tolzZ31b65UzbAKhpCCA7I0iNdO7NEuL0lU=
-[`cloud.fripost.org:443` (lagring för delning)](https://crt.sh/?spkisha256=646f81c006a9bd6a43bbfeb56ab20db829427589dcf13cc24d2036724b5be8cf&iCAID=16418&exclude=expired)
+[`cloud.fripost.org:443` (lagring för delning)](https://crt.sh/?spkisha256=646f81c006a9bd6a43bbfeb56ab20db829427589dcf13cc24d2036724b5be8cf&exclude=expired)
: SHA1 8F:D6:E2:F1:C8:88:BD:18:83:D7:70:55:D6:A2:D3:89:38:F7:F9:31
SHA256 ZG+BwAapvWpDu/61arINuClCdYnc8TzCTSA2cktb6M8=