From 9f84d44d7321c3c1b858ed7748a285fe729f58e5 Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Mon, 28 Mar 2016 00:17:15 +0300 Subject: Replace LE's X1 intermediate CA with X3 since the latter has better support for XP. --- website/certs.mdwn | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) (limited to 'website/certs.mdwn') diff --git a/website/certs.mdwn b/website/certs.mdwn index 07fac26..bb6b654 100644 --- a/website/certs.mdwn +++ b/website/certs.mdwn @@ -12,60 +12,60 @@ These certificates are all issued by the [[Let's Encrypt Certificate Authority|https://letsencrypt.org]], and are submitted to [[Certificate Transparency logs|https://www.certificate-transparency.org]]. You can view all issued Let's Encrypt certificates at -[[crt.sh|https://crt.sh/?Identity=%25fripost.org&iCAID=7395]]. +[[crt.sh|https://crt.sh/?Identity=%25fripost.org&iCAID=16418]]. Our X.509 certificates are also available in PEM format under our [[Git repository|https://git.fripost.org/fripost-ansible/tree/certs/public]], from which this fingerprint list was [[generated|https://git.fripost.org/fripost-ansible/tree/certs/gencerts.sh]], at -[[Commit ID da2572d from Sun, 20 Dec 2015 14:13:08 +0100|https://git.fripost.org/fripost-ansible/tree/certs/public?id=da2572ddb144086034eba1989ae909763e95c680]]. +[[Commit ID 4dbc2fb from Sun, 27 Mar 2016 20:19:01 +0300|https://git.fripost.org/fripost-ansible/tree/certs/public?id=4dbc2fb82f4f001c4927d200ddedae7ac1ff5f70]]. * IMAP server - [[imap.fripost.org:993 (IMAP over SSL), sieve.fripost.org:4190 (ManageSieve, STARTTLS)|https://crt.sh/?spkisha1=79eec21b9b5a67d81fdfd2f52aa368eb02ff5af2&iCAID=7395]] + [[imap.fripost.org:993 (IMAP over SSL), sieve.fripost.org:4190 (ManageSieve, STARTTLS)|https://crt.sh/?spkisha1=79eec21b9b5a67d81fdfd2f52aa368eb02ff5af2&iCAID=16418]] SHA1 79:EE:C2:1B:9B:5A:67:D8:1F:DF:D2:F5:2A:A3:68:EB:02:FF:5A:F2 SHA256 60:DB:17:31:FC:F1:F8:60:DE:7E:84:C1:A2:C4:8C:B9:CD:ED:00:47:50:B2:1F:BF:67:61:6B:13:E8:AD:7D:E5 * SMTP servers (STARTTLS) - [[smtp.fripost.org:587 (Mail Submission Agent)|https://crt.sh/?spkisha1=a7db174b55947b8fbb905fbc48cc99fd2973c7d8&iCAID=7395]] + [[smtp.fripost.org:587 (Mail Submission Agent)|https://crt.sh/?spkisha1=a7db174b55947b8fbb905fbc48cc99fd2973c7d8&iCAID=16418]] SHA1 A7:DB:17:4B:55:94:7B:8F:BB:90:5F:BC:48:CC:99:FD:29:73:C7:D8 SHA256 A2:72:6E:C6:51:4D:66:70:AA:F4:90:08:C1:7A:3F:28:F9:2E:E9:81:E5:30:D1:0E:19:D6:84:7C:EA:A3:C9:05 - [[mx1.fripost.org:25 (1st Mail eXchange)|https://crt.sh/?spkisha1=dfd733fb96ec39584e310535e0dfea592790d40d&iCAID=7395]] + [[mx1.fripost.org:25 (1st Mail eXchange)|https://crt.sh/?spkisha1=dfd733fb96ec39584e310535e0dfea592790d40d&iCAID=16418]] SHA1 DF:D7:33:FB:96:EC:39:58:4E:31:05:35:E0:DF:EA:59:27:90:D4:0D SHA256 63:C2:A1:DC:E0:BC:20:A6:CD:E1:6E:AE:1C:EC:71:CF:42:27:0D:1E:46:0F:03:9D:C2:FD:EA:1E:27:48:70:BA - [[mx2.fripost.org:25 (2nd Mail eXchange)|https://crt.sh/?spkisha1=a085b9519ff1713cf661c16a7edcf4918a643211&iCAID=7395]] + [[mx2.fripost.org:25 (2nd Mail eXchange)|https://crt.sh/?spkisha1=a085b9519ff1713cf661c16a7edcf4918a643211&iCAID=16418]] SHA1 A0:85:B9:51:9F:F1:71:3C:F6:61:C1:6A:7E:DC:F4:91:8A:64:32:11 SHA256 93:07:B7:87:81:24:E4:E7:9F:98:71:EE:88:CB:9D:4A:82:EA:9E:7C:27:06:5A:21:A8:1D:90:25:67:A8:D2:7A * Web servers - [[fripost.org:443 (website), wiki.fripost.org:443 (wiki)|https://crt.sh/?spkisha1=b8cbe1307eba03c3dbbebf65fd8068f8d3e01c7d&iCAID=7395]] + [[fripost.org:443 (website), wiki.fripost.org:443 (wiki)|https://crt.sh/?spkisha1=b8cbe1307eba03c3dbbebf65fd8068f8d3e01c7d&iCAID=16418]] SHA1 B8:CB:E1:30:7E:BA:03:C3:DB:BE:BF:65:FD:80:68:F8:D3:E0:1C:7D SHA256 7D:0F:A0:6A:EE:F6:8B:03:9F:EA:B9:97:BD:8E:FF:41:E9:81:FA:46:21:8B:13:C2:63:F0:3F:10:8A:F7:6A:DB - [[mail.fripost.org:443 (webmail)|https://crt.sh/?spkisha1=4fe74240983551cf9365eff2d17c3c4660642c30&iCAID=7395]] + [[mail.fripost.org:443 (webmail)|https://crt.sh/?spkisha1=4fe74240983551cf9365eff2d17c3c4660642c30&iCAID=16418]] SHA1 4F:E7:42:40:98:35:51:CF:93:65:EF:F2:D1:7C:3C:46:60:64:2C:30 SHA256 48:77:E7:88:C1:1A:A7:17:98:A3:96:13:FF:68:CF:FA:7F:96:B2:D3:5A:62:08:43:32:16:54:69:D2:E5:3C:39 - [[lists.fripost.org:443 (list manager)|https://crt.sh/?spkisha1=e94589199544b1c761c1754ba13f8c38d410a533&iCAID=7395]] + [[lists.fripost.org:443 (list manager)|https://crt.sh/?spkisha1=e94589199544b1c761c1754ba13f8c38d410a533&iCAID=16418]] SHA1 E9:45:89:19:95:44:B1:C7:61:C1:75:4B:A1:3F:8C:38:D4:10:A5:33 SHA256 38:BC:75:84:E1:2A:9C:27:52:FF:B6:60:CD:3C:C0:97:C2:20:FC:2C:29:CF:93:18:F4:9F:45:8A:C8:60:EB:FD - [[git.fripost.org:443 (git server and its web interface)|https://crt.sh/?spkisha1=02d77cf016f4550dc36ba1c4b6951b652664c828&iCAID=7395]] + [[git.fripost.org:443 (git server and its web interface)|https://crt.sh/?spkisha1=02d77cf016f4550dc36ba1c4b6951b652664c828&iCAID=16418]] SHA1 02:D7:7C:F0:16:F4:55:0D:C3:6B:A1:C4:B6:95:1B:65:26:64:C8:28 SHA256 1C:EA:22:5E:00:BB:B6:89:73:67:7D:5B:EB:95:33:6C:02:A1:A4:20:80:EC:8D:22:35:D3:BB:34:4B:8B:D2:55 -- cgit v1.2.3 From a60f93532639b9127d23ad837f53ae6b8136b5a7 Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Mon, 28 Mar 2016 00:43:25 +0300 Subject: gencerts.sh: improve formatting. --- website/certs.mdwn | 23 ++++++++++------------- 1 file changed, 10 insertions(+), 13 deletions(-) (limited to 'website/certs.mdwn') diff --git a/website/certs.mdwn b/website/certs.mdwn index bb6b654..f5971f9 100644 --- a/website/certs.mdwn +++ b/website/certs.mdwn @@ -21,58 +21,55 @@ from which this fingerprint list was [[generated|https://git.fripost.org/fripost * IMAP server - [[imap.fripost.org:993 (IMAP over SSL), sieve.fripost.org:4190 (ManageSieve, STARTTLS)|https://crt.sh/?spkisha1=79eec21b9b5a67d81fdfd2f52aa368eb02ff5af2&iCAID=16418]] + [[`imap.fripost.org:993` (IMAP over SSL), `sieve.fripost.org:4190` (ManageSieve, `STARTTLS`)|https://crt.sh/?spkisha1=79eec21b9b5a67d81fdfd2f52aa368eb02ff5af2&iCAID=16418]] SHA1 79:EE:C2:1B:9B:5A:67:D8:1F:DF:D2:F5:2A:A3:68:EB:02:FF:5A:F2 SHA256 60:DB:17:31:FC:F1:F8:60:DE:7E:84:C1:A2:C4:8C:B9:CD:ED:00:47:50:B2:1F:BF:67:61:6B:13:E8:AD:7D:E5 - * SMTP servers (STARTTLS) + * SMTP servers - [[smtp.fripost.org:587 (Mail Submission Agent)|https://crt.sh/?spkisha1=a7db174b55947b8fbb905fbc48cc99fd2973c7d8&iCAID=16418]] + [[`smtp.fripost.org:587` (Mail Submission Agent, `STARTTLS`)|https://crt.sh/?spkisha1=a7db174b55947b8fbb905fbc48cc99fd2973c7d8&iCAID=16418]] SHA1 A7:DB:17:4B:55:94:7B:8F:BB:90:5F:BC:48:CC:99:FD:29:73:C7:D8 SHA256 A2:72:6E:C6:51:4D:66:70:AA:F4:90:08:C1:7A:3F:28:F9:2E:E9:81:E5:30:D1:0E:19:D6:84:7C:EA:A3:C9:05 - [[mx1.fripost.org:25 (1st Mail eXchange)|https://crt.sh/?spkisha1=dfd733fb96ec39584e310535e0dfea592790d40d&iCAID=16418]] + [[`mx1.fripost.org:25` (1st Mail eXchange, `STARTTLS`)|https://crt.sh/?spkisha1=dfd733fb96ec39584e310535e0dfea592790d40d&iCAID=16418]] SHA1 DF:D7:33:FB:96:EC:39:58:4E:31:05:35:E0:DF:EA:59:27:90:D4:0D SHA256 63:C2:A1:DC:E0:BC:20:A6:CD:E1:6E:AE:1C:EC:71:CF:42:27:0D:1E:46:0F:03:9D:C2:FD:EA:1E:27:48:70:BA - [[mx2.fripost.org:25 (2nd Mail eXchange)|https://crt.sh/?spkisha1=a085b9519ff1713cf661c16a7edcf4918a643211&iCAID=16418]] + [[`mx2.fripost.org:25` (2nd Mail eXchange, `STARTTLS`)|https://crt.sh/?spkisha1=a085b9519ff1713cf661c16a7edcf4918a643211&iCAID=16418]] SHA1 A0:85:B9:51:9F:F1:71:3C:F6:61:C1:6A:7E:DC:F4:91:8A:64:32:11 SHA256 93:07:B7:87:81:24:E4:E7:9F:98:71:EE:88:CB:9D:4A:82:EA:9E:7C:27:06:5A:21:A8:1D:90:25:67:A8:D2:7A * Web servers - [[fripost.org:443 (website), wiki.fripost.org:443 (wiki)|https://crt.sh/?spkisha1=b8cbe1307eba03c3dbbebf65fd8068f8d3e01c7d&iCAID=16418]] + [[`fripost.org:443` (website), `wiki.fripost.org:443` (wiki)|https://crt.sh/?spkisha1=b8cbe1307eba03c3dbbebf65fd8068f8d3e01c7d&iCAID=16418]] SHA1 B8:CB:E1:30:7E:BA:03:C3:DB:BE:BF:65:FD:80:68:F8:D3:E0:1C:7D SHA256 7D:0F:A0:6A:EE:F6:8B:03:9F:EA:B9:97:BD:8E:FF:41:E9:81:FA:46:21:8B:13:C2:63:F0:3F:10:8A:F7:6A:DB - [[mail.fripost.org:443 (webmail)|https://crt.sh/?spkisha1=4fe74240983551cf9365eff2d17c3c4660642c30&iCAID=16418]] + [[`mail.fripost.org:443` (webmail)|https://crt.sh/?spkisha1=4fe74240983551cf9365eff2d17c3c4660642c30&iCAID=16418]] SHA1 4F:E7:42:40:98:35:51:CF:93:65:EF:F2:D1:7C:3C:46:60:64:2C:30 SHA256 48:77:E7:88:C1:1A:A7:17:98:A3:96:13:FF:68:CF:FA:7F:96:B2:D3:5A:62:08:43:32:16:54:69:D2:E5:3C:39 - [[lists.fripost.org:443 (list manager)|https://crt.sh/?spkisha1=e94589199544b1c761c1754ba13f8c38d410a533&iCAID=16418]] + [[`lists.fripost.org:443` (list manager)|https://crt.sh/?spkisha1=e94589199544b1c761c1754ba13f8c38d410a533&iCAID=16418]] SHA1 E9:45:89:19:95:44:B1:C7:61:C1:75:4B:A1:3F:8C:38:D4:10:A5:33 SHA256 38:BC:75:84:E1:2A:9C:27:52:FF:B6:60:CD:3C:C0:97:C2:20:FC:2C:29:CF:93:18:F4:9F:45:8A:C8:60:EB:FD - [[git.fripost.org:443 (git server and its web interface)|https://crt.sh/?spkisha1=02d77cf016f4550dc36ba1c4b6951b652664c828&iCAID=16418]] + [[`git.fripost.org:443` (git server and its web interface)|https://crt.sh/?spkisha1=02d77cf016f4550dc36ba1c4b6951b652664c828&iCAID=16418]] SHA1 02:D7:7C:F0:16:F4:55:0D:C3:6B:A1:C4:B6:95:1B:65:26:64:C8:28 SHA256 1C:EA:22:5E:00:BB:B6:89:73:67:7D:5B:EB:95:33:6C:02:A1:A4:20:80:EC:8D:22:35:D3:BB:34:4B:8B:D2:55 * SSH server - gitolite@git.fripost.org:22 - - RSA MD5:0b:e5:47:44:71:cb:41:7d:1e:1b:25:bc:28:e8:c3:a2 - RSA SHA256:zNZXfa/okPm/tV9dl3gNlizfXAghrMSgrcwICiWx+80 + `gitolite@git.fripost.org:22` -- cgit v1.2.3 From 39b1a17d9f3540af487f01af5d4176d55ea2196c Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Mon, 28 Mar 2016 01:03:18 +0300 Subject: typo --- website/certs.mdwn | 3 +++ 1 file changed, 3 insertions(+) (limited to 'website/certs.mdwn') diff --git a/website/certs.mdwn b/website/certs.mdwn index f5971f9..b4a8a70 100644 --- a/website/certs.mdwn +++ b/website/certs.mdwn @@ -73,3 +73,6 @@ from which this fingerprint list was [[generated|https://git.fripost.org/fripost * SSH server `gitolite@git.fripost.org:22` + + RSA MD5:0b:e5:47:44:71:cb:41:7d:1e:1b:25:bc:28:e8:c3:a2 + RSA SHA256:zNZXfa/okPm/tV9dl3gNlizfXAghrMSgrcwICiWx+80 -- cgit v1.2.3 From e2db2cbd1718a8dab72a692d4c54dc8d043edc32 Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Sun, 22 May 2016 17:45:55 +0200 Subject: certs: improve formatting. --- website/certs.mdwn | 34 +++++++++++++++++----------------- 1 file changed, 17 insertions(+), 17 deletions(-) (limited to 'website/certs.mdwn') diff --git a/website/certs.mdwn b/website/certs.mdwn index b4a8a70..faefffe 100644 --- a/website/certs.mdwn +++ b/website/certs.mdwn @@ -4,68 +4,68 @@ The following is an up-to date list of SHA-1 and SHA-256 fingerprints of all SPKI (Subject Public Key Info) of each X.509 certificate Fripost uses on its publicly available services. Please consider any mismatch as a man-in-the-middle attack, and let us know immediately! (See also -the [[signed version of this page|certs.asc]].) --- [[admin@fripost.org|mailto:admin@fripost.org]] +the [signed version of this page](certs.asc).) +-- [the admin team](mailto:admin@fripost.org) -These certificates are all issued by the [[Let's Encrypt Certificate -Authority|https://letsencrypt.org]], and are submitted to [[Certificate -Transparency logs|https://www.certificate-transparency.org]]. +These certificates are all issued by the [Let's Encrypt Certificate +Authority](https://letsencrypt.org), and are submitted to [Certificate +Transparency logs](https://www.certificate-transparency.org). You can view all issued Let's Encrypt certificates at -[[crt.sh|https://crt.sh/?Identity=%25fripost.org&iCAID=16418]]. +[crt.sh](https://crt.sh/?Identity=%25fripost.org&iCAID=16418). Our X.509 certificates are also available in PEM format under our -[[Git repository|https://git.fripost.org/fripost-ansible/tree/certs/public]], -from which this fingerprint list was [[generated|https://git.fripost.org/fripost-ansible/tree/certs/gencerts.sh]], at -[[Commit ID 4dbc2fb from Sun, 27 Mar 2016 20:19:01 +0300|https://git.fripost.org/fripost-ansible/tree/certs/public?id=4dbc2fb82f4f001c4927d200ddedae7ac1ff5f70]]. +[Git repository](https://git.fripost.org/fripost-ansible/tree/certs/public), +from which this fingerprint list was [generated](https://git.fripost.org/fripost-ansible/tree/certs/gencerts.sh), at +[Commit ID 71aefcc from Wed, 18 May 2016 00:10:50 +0200](https://git.fripost.org/fripost-ansible/tree/certs/public?id=71aefcc229f999f92b25e51b9444b313d95fbc86). * IMAP server - [[`imap.fripost.org:993` (IMAP over SSL), `sieve.fripost.org:4190` (ManageSieve, `STARTTLS`)|https://crt.sh/?spkisha1=79eec21b9b5a67d81fdfd2f52aa368eb02ff5af2&iCAID=16418]] + [`imap.fripost.org:993` (IMAP over SSL), `sieve.fripost.org:4190` (ManageSieve, `STARTTLS`)](https://crt.sh/?spkisha1=79eec21b9b5a67d81fdfd2f52aa368eb02ff5af2&iCAID=16418) SHA1 79:EE:C2:1B:9B:5A:67:D8:1F:DF:D2:F5:2A:A3:68:EB:02:FF:5A:F2 SHA256 60:DB:17:31:FC:F1:F8:60:DE:7E:84:C1:A2:C4:8C:B9:CD:ED:00:47:50:B2:1F:BF:67:61:6B:13:E8:AD:7D:E5 * SMTP servers - [[`smtp.fripost.org:587` (Mail Submission Agent, `STARTTLS`)|https://crt.sh/?spkisha1=a7db174b55947b8fbb905fbc48cc99fd2973c7d8&iCAID=16418]] + [`smtp.fripost.org:587` (Mail Submission Agent, `STARTTLS`)](https://crt.sh/?spkisha1=a7db174b55947b8fbb905fbc48cc99fd2973c7d8&iCAID=16418) SHA1 A7:DB:17:4B:55:94:7B:8F:BB:90:5F:BC:48:CC:99:FD:29:73:C7:D8 SHA256 A2:72:6E:C6:51:4D:66:70:AA:F4:90:08:C1:7A:3F:28:F9:2E:E9:81:E5:30:D1:0E:19:D6:84:7C:EA:A3:C9:05 - [[`mx1.fripost.org:25` (1st Mail eXchange, `STARTTLS`)|https://crt.sh/?spkisha1=dfd733fb96ec39584e310535e0dfea592790d40d&iCAID=16418]] + [`mx1.fripost.org:25` (1st Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha1=dfd733fb96ec39584e310535e0dfea592790d40d&iCAID=16418) SHA1 DF:D7:33:FB:96:EC:39:58:4E:31:05:35:E0:DF:EA:59:27:90:D4:0D SHA256 63:C2:A1:DC:E0:BC:20:A6:CD:E1:6E:AE:1C:EC:71:CF:42:27:0D:1E:46:0F:03:9D:C2:FD:EA:1E:27:48:70:BA - [[`mx2.fripost.org:25` (2nd Mail eXchange, `STARTTLS`)|https://crt.sh/?spkisha1=a085b9519ff1713cf661c16a7edcf4918a643211&iCAID=16418]] + [`mx2.fripost.org:25` (2nd Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha1=a085b9519ff1713cf661c16a7edcf4918a643211&iCAID=16418) SHA1 A0:85:B9:51:9F:F1:71:3C:F6:61:C1:6A:7E:DC:F4:91:8A:64:32:11 SHA256 93:07:B7:87:81:24:E4:E7:9F:98:71:EE:88:CB:9D:4A:82:EA:9E:7C:27:06:5A:21:A8:1D:90:25:67:A8:D2:7A * Web servers - [[`fripost.org:443` (website), `wiki.fripost.org:443` (wiki)|https://crt.sh/?spkisha1=b8cbe1307eba03c3dbbebf65fd8068f8d3e01c7d&iCAID=16418]] + [`fripost.org:443` (website), `wiki.fripost.org:443` (wiki)](https://crt.sh/?spkisha1=b8cbe1307eba03c3dbbebf65fd8068f8d3e01c7d&iCAID=16418) SHA1 B8:CB:E1:30:7E:BA:03:C3:DB:BE:BF:65:FD:80:68:F8:D3:E0:1C:7D SHA256 7D:0F:A0:6A:EE:F6:8B:03:9F:EA:B9:97:BD:8E:FF:41:E9:81:FA:46:21:8B:13:C2:63:F0:3F:10:8A:F7:6A:DB - [[`mail.fripost.org:443` (webmail)|https://crt.sh/?spkisha1=4fe74240983551cf9365eff2d17c3c4660642c30&iCAID=16418]] + [`mail.fripost.org:443` (webmail)](https://crt.sh/?spkisha1=4fe74240983551cf9365eff2d17c3c4660642c30&iCAID=16418) SHA1 4F:E7:42:40:98:35:51:CF:93:65:EF:F2:D1:7C:3C:46:60:64:2C:30 SHA256 48:77:E7:88:C1:1A:A7:17:98:A3:96:13:FF:68:CF:FA:7F:96:B2:D3:5A:62:08:43:32:16:54:69:D2:E5:3C:39 - [[`lists.fripost.org:443` (list manager)|https://crt.sh/?spkisha1=e94589199544b1c761c1754ba13f8c38d410a533&iCAID=16418]] + [`lists.fripost.org:443` (list manager)](https://crt.sh/?spkisha1=e94589199544b1c761c1754ba13f8c38d410a533&iCAID=16418) SHA1 E9:45:89:19:95:44:B1:C7:61:C1:75:4B:A1:3F:8C:38:D4:10:A5:33 SHA256 38:BC:75:84:E1:2A:9C:27:52:FF:B6:60:CD:3C:C0:97:C2:20:FC:2C:29:CF:93:18:F4:9F:45:8A:C8:60:EB:FD - [[`git.fripost.org:443` (git server and its web interface)|https://crt.sh/?spkisha1=02d77cf016f4550dc36ba1c4b6951b652664c828&iCAID=16418]] + [`git.fripost.org:443` (git server and its web interface)](https://crt.sh/?spkisha1=02d77cf016f4550dc36ba1c4b6951b652664c828&iCAID=16418) SHA1 02:D7:7C:F0:16:F4:55:0D:C3:6B:A1:C4:B6:95:1B:65:26:64:C8:28 SHA256 1C:EA:22:5E:00:BB:B6:89:73:67:7D:5B:EB:95:33:6C:02:A1:A4:20:80:EC:8D:22:35:D3:BB:34:4B:8B:D2:55 -- cgit v1.2.3 From 5bbd1e8ff6e118baf23271ca9f5147918cd3eb41 Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Wed, 15 Jun 2016 18:24:24 +0200 Subject: certs/public: fetch each cert's pubkey (SPKI), not the cert itself. --- website/certs.mdwn | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'website/certs.mdwn') diff --git a/website/certs.mdwn b/website/certs.mdwn index faefffe..f4ae9a1 100644 --- a/website/certs.mdwn +++ b/website/certs.mdwn @@ -13,10 +13,10 @@ Authority](https://letsencrypt.org), and are submitted to [Certificate Transparency logs](https://www.certificate-transparency.org). You can view all issued Let's Encrypt certificates at [crt.sh](https://crt.sh/?Identity=%25fripost.org&iCAID=16418). -Our X.509 certificates are also available in PEM format under our -[Git repository](https://git.fripost.org/fripost-ansible/tree/certs/public), +The SPKI of our X.509 certificates are also available in PEM format +under our [Git repository](https://git.fripost.org/fripost-ansible/tree/certs/public), from which this fingerprint list was [generated](https://git.fripost.org/fripost-ansible/tree/certs/gencerts.sh), at -[Commit ID 71aefcc from Wed, 18 May 2016 00:10:50 +0200](https://git.fripost.org/fripost-ansible/tree/certs/public?id=71aefcc229f999f92b25e51b9444b313d95fbc86). +[Commit ID 02d4a58 from Wed, 15 Jun 2016 18:08:48 +0200](https://git.fripost.org/fripost-ansible/tree/certs/public?id=02d4a5892bb3019d448c453ad279788fcd3f1531). * IMAP server -- cgit v1.2.3 From 188e3ea778eb3a003644533cb1aac62aff61fe2c Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Wed, 15 Jun 2016 19:04:19 +0200 Subject: crt.sh: Replace SHA1 by SHA256 as SPKI digest to list certificates. --- website/certs.mdwn | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) (limited to 'website/certs.mdwn') diff --git a/website/certs.mdwn b/website/certs.mdwn index f4ae9a1..738d5aa 100644 --- a/website/certs.mdwn +++ b/website/certs.mdwn @@ -21,51 +21,51 @@ from which this fingerprint list was [generated](https://git.fripost.org/fripost * IMAP server - [`imap.fripost.org:993` (IMAP over SSL), `sieve.fripost.org:4190` (ManageSieve, `STARTTLS`)](https://crt.sh/?spkisha1=79eec21b9b5a67d81fdfd2f52aa368eb02ff5af2&iCAID=16418) + [`imap.fripost.org:993` (IMAP over SSL), `sieve.fripost.org:4190` (ManageSieve, `STARTTLS`)](https://crt.sh/?spkisha256=60db1731fcf1f860de7e84c1a2c48cb9cded004750b21fbf67616b13e8ad7de5&iCAID=16418) SHA1 79:EE:C2:1B:9B:5A:67:D8:1F:DF:D2:F5:2A:A3:68:EB:02:FF:5A:F2 SHA256 60:DB:17:31:FC:F1:F8:60:DE:7E:84:C1:A2:C4:8C:B9:CD:ED:00:47:50:B2:1F:BF:67:61:6B:13:E8:AD:7D:E5 * SMTP servers - [`smtp.fripost.org:587` (Mail Submission Agent, `STARTTLS`)](https://crt.sh/?spkisha1=a7db174b55947b8fbb905fbc48cc99fd2973c7d8&iCAID=16418) + [`smtp.fripost.org:587` (Mail Submission Agent, `STARTTLS`)](https://crt.sh/?spkisha256=a2726ec6514d6670aaf49008c17a3f28f92ee981e530d10e19d6847ceaa3c905&iCAID=16418) SHA1 A7:DB:17:4B:55:94:7B:8F:BB:90:5F:BC:48:CC:99:FD:29:73:C7:D8 SHA256 A2:72:6E:C6:51:4D:66:70:AA:F4:90:08:C1:7A:3F:28:F9:2E:E9:81:E5:30:D1:0E:19:D6:84:7C:EA:A3:C9:05 - [`mx1.fripost.org:25` (1st Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha1=dfd733fb96ec39584e310535e0dfea592790d40d&iCAID=16418) + [`mx1.fripost.org:25` (1st Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha256=63c2a1dce0bc20a6cde16eae1cec71cf42270d1e460f039dc2fdea1e274870ba&iCAID=16418) SHA1 DF:D7:33:FB:96:EC:39:58:4E:31:05:35:E0:DF:EA:59:27:90:D4:0D SHA256 63:C2:A1:DC:E0:BC:20:A6:CD:E1:6E:AE:1C:EC:71:CF:42:27:0D:1E:46:0F:03:9D:C2:FD:EA:1E:27:48:70:BA - [`mx2.fripost.org:25` (2nd Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha1=a085b9519ff1713cf661c16a7edcf4918a643211&iCAID=16418) + [`mx2.fripost.org:25` (2nd Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha256=9307b7878124e4e79f9871ee88cb9d4a82ea9e7c27065a21a81d902567a8d27a&iCAID=16418) SHA1 A0:85:B9:51:9F:F1:71:3C:F6:61:C1:6A:7E:DC:F4:91:8A:64:32:11 SHA256 93:07:B7:87:81:24:E4:E7:9F:98:71:EE:88:CB:9D:4A:82:EA:9E:7C:27:06:5A:21:A8:1D:90:25:67:A8:D2:7A * Web servers - [`fripost.org:443` (website), `wiki.fripost.org:443` (wiki)](https://crt.sh/?spkisha1=b8cbe1307eba03c3dbbebf65fd8068f8d3e01c7d&iCAID=16418) + [`fripost.org:443` (website), `wiki.fripost.org:443` (wiki)](https://crt.sh/?spkisha256=7d0fa06aeef68b039feab997bd8eff41e981fa46218b13c263f03f108af76adb&iCAID=16418) SHA1 B8:CB:E1:30:7E:BA:03:C3:DB:BE:BF:65:FD:80:68:F8:D3:E0:1C:7D SHA256 7D:0F:A0:6A:EE:F6:8B:03:9F:EA:B9:97:BD:8E:FF:41:E9:81:FA:46:21:8B:13:C2:63:F0:3F:10:8A:F7:6A:DB - [`mail.fripost.org:443` (webmail)](https://crt.sh/?spkisha1=4fe74240983551cf9365eff2d17c3c4660642c30&iCAID=16418) + [`mail.fripost.org:443` (webmail)](https://crt.sh/?spkisha256=4877e788c11aa71798a39613ff68cffa7f96b2d35a62084332165469d2e53c39&iCAID=16418) SHA1 4F:E7:42:40:98:35:51:CF:93:65:EF:F2:D1:7C:3C:46:60:64:2C:30 SHA256 48:77:E7:88:C1:1A:A7:17:98:A3:96:13:FF:68:CF:FA:7F:96:B2:D3:5A:62:08:43:32:16:54:69:D2:E5:3C:39 - [`lists.fripost.org:443` (list manager)](https://crt.sh/?spkisha1=e94589199544b1c761c1754ba13f8c38d410a533&iCAID=16418) + [`lists.fripost.org:443` (list manager)](https://crt.sh/?spkisha256=38bc7584e12a9c2752ffb660cd3cc097c220fc2c29cf9318f49f458ac860ebfd&iCAID=16418) SHA1 E9:45:89:19:95:44:B1:C7:61:C1:75:4B:A1:3F:8C:38:D4:10:A5:33 SHA256 38:BC:75:84:E1:2A:9C:27:52:FF:B6:60:CD:3C:C0:97:C2:20:FC:2C:29:CF:93:18:F4:9F:45:8A:C8:60:EB:FD - [`git.fripost.org:443` (git server and its web interface)](https://crt.sh/?spkisha1=02d77cf016f4550dc36ba1c4b6951b652664c828&iCAID=16418) + [`git.fripost.org:443` (git server and its web interface)](https://crt.sh/?spkisha256=1cea225e00bbb68973677d5beb95336c02a1a42080ec8d2235d3bb344b8bd255&iCAID=16418) SHA1 02:D7:7C:F0:16:F4:55:0D:C3:6B:A1:C4:B6:95:1B:65:26:64:C8:28 SHA256 1C:EA:22:5E:00:BB:B6:89:73:67:7D:5B:EB:95:33:6C:02:A1:A4:20:80:EC:8D:22:35:D3:BB:34:4B:8B:D2:55 -- cgit v1.2.3 From ae7c1f2c335ced7278fa6467218d6a7b4182d49e Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Wed, 15 Jun 2016 19:07:03 +0200 Subject: typo --- website/certs.mdwn | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'website/certs.mdwn') diff --git a/website/certs.mdwn b/website/certs.mdwn index 738d5aa..7e64122 100644 --- a/website/certs.mdwn +++ b/website/certs.mdwn @@ -4,7 +4,7 @@ The following is an up-to date list of SHA-1 and SHA-256 fingerprints of all SPKI (Subject Public Key Info) of each X.509 certificate Fripost uses on its publicly available services. Please consider any mismatch as a man-in-the-middle attack, and let us know immediately! (See also -the [signed version of this page](certs.asc).) +the [signed version of this page](/certs.asc).) -- [the admin team](mailto:admin@fripost.org) -- cgit v1.2.3 From 83182e1c1bba84624a84b643fb96d9b053c1a47b Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Sun, 10 Jul 2016 23:22:17 +0200 Subject: gencerts: exclude expired certs in the crt.sh queries. --- website/certs.mdwn | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) (limited to 'website/certs.mdwn') diff --git a/website/certs.mdwn b/website/certs.mdwn index 7e64122..aa728b3 100644 --- a/website/certs.mdwn +++ b/website/certs.mdwn @@ -16,56 +16,56 @@ You can view all issued Let's Encrypt certificates at The SPKI of our X.509 certificates are also available in PEM format under our [Git repository](https://git.fripost.org/fripost-ansible/tree/certs/public), from which this fingerprint list was [generated](https://git.fripost.org/fripost-ansible/tree/certs/gencerts.sh), at -[Commit ID 02d4a58 from Wed, 15 Jun 2016 18:08:48 +0200](https://git.fripost.org/fripost-ansible/tree/certs/public?id=02d4a5892bb3019d448c453ad279788fcd3f1531). +[Commit ID 02772c9 from Sun, 10 Jul 2016 01:16:00 +0200](https://git.fripost.org/fripost-ansible/tree/certs/public?id=02772c92ce74490ce60792b0543d60ce71f28e42). * IMAP server - [`imap.fripost.org:993` (IMAP over SSL), `sieve.fripost.org:4190` (ManageSieve, `STARTTLS`)](https://crt.sh/?spkisha256=60db1731fcf1f860de7e84c1a2c48cb9cded004750b21fbf67616b13e8ad7de5&iCAID=16418) + [`imap.fripost.org:993` (IMAP over SSL), `sieve.fripost.org:4190` (ManageSieve, `STARTTLS`)](https://crt.sh/?spkisha256=60db1731fcf1f860de7e84c1a2c48cb9cded004750b21fbf67616b13e8ad7de5&iCAID=16418&exclude=expired) SHA1 79:EE:C2:1B:9B:5A:67:D8:1F:DF:D2:F5:2A:A3:68:EB:02:FF:5A:F2 SHA256 60:DB:17:31:FC:F1:F8:60:DE:7E:84:C1:A2:C4:8C:B9:CD:ED:00:47:50:B2:1F:BF:67:61:6B:13:E8:AD:7D:E5 * SMTP servers - [`smtp.fripost.org:587` (Mail Submission Agent, `STARTTLS`)](https://crt.sh/?spkisha256=a2726ec6514d6670aaf49008c17a3f28f92ee981e530d10e19d6847ceaa3c905&iCAID=16418) + [`smtp.fripost.org:587` (Mail Submission Agent, `STARTTLS`)](https://crt.sh/?spkisha256=a2726ec6514d6670aaf49008c17a3f28f92ee981e530d10e19d6847ceaa3c905&iCAID=16418&exclude=expired) SHA1 A7:DB:17:4B:55:94:7B:8F:BB:90:5F:BC:48:CC:99:FD:29:73:C7:D8 SHA256 A2:72:6E:C6:51:4D:66:70:AA:F4:90:08:C1:7A:3F:28:F9:2E:E9:81:E5:30:D1:0E:19:D6:84:7C:EA:A3:C9:05 - [`mx1.fripost.org:25` (1st Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha256=63c2a1dce0bc20a6cde16eae1cec71cf42270d1e460f039dc2fdea1e274870ba&iCAID=16418) + [`mx1.fripost.org:25` (1st Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha256=63c2a1dce0bc20a6cde16eae1cec71cf42270d1e460f039dc2fdea1e274870ba&iCAID=16418&exclude=expired) SHA1 DF:D7:33:FB:96:EC:39:58:4E:31:05:35:E0:DF:EA:59:27:90:D4:0D SHA256 63:C2:A1:DC:E0:BC:20:A6:CD:E1:6E:AE:1C:EC:71:CF:42:27:0D:1E:46:0F:03:9D:C2:FD:EA:1E:27:48:70:BA - [`mx2.fripost.org:25` (2nd Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha256=9307b7878124e4e79f9871ee88cb9d4a82ea9e7c27065a21a81d902567a8d27a&iCAID=16418) + [`mx2.fripost.org:25` (2nd Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha256=9307b7878124e4e79f9871ee88cb9d4a82ea9e7c27065a21a81d902567a8d27a&iCAID=16418&exclude=expired) SHA1 A0:85:B9:51:9F:F1:71:3C:F6:61:C1:6A:7E:DC:F4:91:8A:64:32:11 SHA256 93:07:B7:87:81:24:E4:E7:9F:98:71:EE:88:CB:9D:4A:82:EA:9E:7C:27:06:5A:21:A8:1D:90:25:67:A8:D2:7A * Web servers - [`fripost.org:443` (website), `wiki.fripost.org:443` (wiki)](https://crt.sh/?spkisha256=7d0fa06aeef68b039feab997bd8eff41e981fa46218b13c263f03f108af76adb&iCAID=16418) + [`fripost.org:443` (website), `wiki.fripost.org:443` (wiki)](https://crt.sh/?spkisha256=7d0fa06aeef68b039feab997bd8eff41e981fa46218b13c263f03f108af76adb&iCAID=16418&exclude=expired) SHA1 B8:CB:E1:30:7E:BA:03:C3:DB:BE:BF:65:FD:80:68:F8:D3:E0:1C:7D SHA256 7D:0F:A0:6A:EE:F6:8B:03:9F:EA:B9:97:BD:8E:FF:41:E9:81:FA:46:21:8B:13:C2:63:F0:3F:10:8A:F7:6A:DB - [`mail.fripost.org:443` (webmail)](https://crt.sh/?spkisha256=4877e788c11aa71798a39613ff68cffa7f96b2d35a62084332165469d2e53c39&iCAID=16418) + [`mail.fripost.org:443` (webmail)](https://crt.sh/?spkisha256=4877e788c11aa71798a39613ff68cffa7f96b2d35a62084332165469d2e53c39&iCAID=16418&exclude=expired) SHA1 4F:E7:42:40:98:35:51:CF:93:65:EF:F2:D1:7C:3C:46:60:64:2C:30 SHA256 48:77:E7:88:C1:1A:A7:17:98:A3:96:13:FF:68:CF:FA:7F:96:B2:D3:5A:62:08:43:32:16:54:69:D2:E5:3C:39 - [`lists.fripost.org:443` (list manager)](https://crt.sh/?spkisha256=38bc7584e12a9c2752ffb660cd3cc097c220fc2c29cf9318f49f458ac860ebfd&iCAID=16418) + [`lists.fripost.org:443` (list manager)](https://crt.sh/?spkisha256=38bc7584e12a9c2752ffb660cd3cc097c220fc2c29cf9318f49f458ac860ebfd&iCAID=16418&exclude=expired) SHA1 E9:45:89:19:95:44:B1:C7:61:C1:75:4B:A1:3F:8C:38:D4:10:A5:33 SHA256 38:BC:75:84:E1:2A:9C:27:52:FF:B6:60:CD:3C:C0:97:C2:20:FC:2C:29:CF:93:18:F4:9F:45:8A:C8:60:EB:FD - [`git.fripost.org:443` (git server and its web interface)](https://crt.sh/?spkisha256=1cea225e00bbb68973677d5beb95336c02a1a42080ec8d2235d3bb344b8bd255&iCAID=16418) + [`git.fripost.org:443` (git server and its web interface)](https://crt.sh/?spkisha256=1cea225e00bbb68973677d5beb95336c02a1a42080ec8d2235d3bb344b8bd255&iCAID=16418&exclude=expired) SHA1 02:D7:7C:F0:16:F4:55:0D:C3:6B:A1:C4:B6:95:1B:65:26:64:C8:28 SHA256 1C:EA:22:5E:00:BB:B6:89:73:67:7D:5B:EB:95:33:6C:02:A1:A4:20:80:EC:8D:22:35:D3:BB:34:4B:8B:D2:55 -- cgit v1.2.3 From 3b2633bc99bebf6d295b9f15c8a7f153f77aa8e2 Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Tue, 12 Jul 2016 15:47:10 +0200 Subject: gencerts: base64-encode the SHA256 digests. Also, include the backup pins in the .asc. And list the website's and webmail SANs. --- website/certs.mdwn | 38 +++++++++++++++++++------------------- 1 file changed, 19 insertions(+), 19 deletions(-) (limited to 'website/certs.mdwn') diff --git a/website/certs.mdwn b/website/certs.mdwn index aa728b3..94e33d4 100644 --- a/website/certs.mdwn +++ b/website/certs.mdwn @@ -16,59 +16,59 @@ You can view all issued Let's Encrypt certificates at The SPKI of our X.509 certificates are also available in PEM format under our [Git repository](https://git.fripost.org/fripost-ansible/tree/certs/public), from which this fingerprint list was [generated](https://git.fripost.org/fripost-ansible/tree/certs/gencerts.sh), at -[Commit ID 02772c9 from Sun, 10 Jul 2016 01:16:00 +0200](https://git.fripost.org/fripost-ansible/tree/certs/public?id=02772c92ce74490ce60792b0543d60ce71f28e42). +[Commit ID ef43052 from Tue, 12 Jul 2016 03:10:33 +0200](https://git.fripost.org/fripost-ansible/tree/certs/public?id=ef430522256013665205cdda05636846cc622251). * IMAP server [`imap.fripost.org:993` (IMAP over SSL), `sieve.fripost.org:4190` (ManageSieve, `STARTTLS`)](https://crt.sh/?spkisha256=60db1731fcf1f860de7e84c1a2c48cb9cded004750b21fbf67616b13e8ad7de5&iCAID=16418&exclude=expired) - SHA1 79:EE:C2:1B:9B:5A:67:D8:1F:DF:D2:F5:2A:A3:68:EB:02:FF:5A:F2 - SHA256 60:DB:17:31:FC:F1:F8:60:DE:7E:84:C1:A2:C4:8C:B9:CD:ED:00:47:50:B2:1F:BF:67:61:6B:13:E8:AD:7D:E5 + SHA1 ee7CG5taZ9gf39L1KqNo6wL/WvI= + SHA256 YNsXMfzx+GDefoTBosSMuc3tAEdQsh+/Z2FrE+itfeU= * SMTP servers [`smtp.fripost.org:587` (Mail Submission Agent, `STARTTLS`)](https://crt.sh/?spkisha256=a2726ec6514d6670aaf49008c17a3f28f92ee981e530d10e19d6847ceaa3c905&iCAID=16418&exclude=expired) - SHA1 A7:DB:17:4B:55:94:7B:8F:BB:90:5F:BC:48:CC:99:FD:29:73:C7:D8 - SHA256 A2:72:6E:C6:51:4D:66:70:AA:F4:90:08:C1:7A:3F:28:F9:2E:E9:81:E5:30:D1:0E:19:D6:84:7C:EA:A3:C9:05 + SHA1 p9sXS1WUe4+7kF+8SMyZ/Slzx9g= + SHA256 onJuxlFNZnCq9JAIwXo/KPku6YHlMNEOGdaEfOqjyQU= [`mx1.fripost.org:25` (1st Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha256=63c2a1dce0bc20a6cde16eae1cec71cf42270d1e460f039dc2fdea1e274870ba&iCAID=16418&exclude=expired) - SHA1 DF:D7:33:FB:96:EC:39:58:4E:31:05:35:E0:DF:EA:59:27:90:D4:0D - SHA256 63:C2:A1:DC:E0:BC:20:A6:CD:E1:6E:AE:1C:EC:71:CF:42:27:0D:1E:46:0F:03:9D:C2:FD:EA:1E:27:48:70:BA + SHA1 39cz+5bsOVhOMQU14N/qWSeQ1A0= + SHA256 Y8Kh3OC8IKbN4W6uHOxxz0InDR5GDwOdwv3qHidIcLo= [`mx2.fripost.org:25` (2nd Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha256=9307b7878124e4e79f9871ee88cb9d4a82ea9e7c27065a21a81d902567a8d27a&iCAID=16418&exclude=expired) - SHA1 A0:85:B9:51:9F:F1:71:3C:F6:61:C1:6A:7E:DC:F4:91:8A:64:32:11 - SHA256 93:07:B7:87:81:24:E4:E7:9F:98:71:EE:88:CB:9D:4A:82:EA:9E:7C:27:06:5A:21:A8:1D:90:25:67:A8:D2:7A + SHA1 oIW5UZ/xcTz2YcFqftz0kYpkMhE= + SHA256 kwe3h4Ek5OefmHHuiMudSoLqnnwnBlohqB2QJWeo0no= * Web servers - [`fripost.org:443` (website), `wiki.fripost.org:443` (wiki)](https://crt.sh/?spkisha256=7d0fa06aeef68b039feab997bd8eff41e981fa46218b13c263f03f108af76adb&iCAID=16418&exclude=expired) + [`fripost.org:443`, `www.fripost.org:443` (website), `wiki.fripost.org:443` (wiki)](https://crt.sh/?spkisha256=7d0fa06aeef68b039feab997bd8eff41e981fa46218b13c263f03f108af76adb&iCAID=16418&exclude=expired) - SHA1 B8:CB:E1:30:7E:BA:03:C3:DB:BE:BF:65:FD:80:68:F8:D3:E0:1C:7D - SHA256 7D:0F:A0:6A:EE:F6:8B:03:9F:EA:B9:97:BD:8E:FF:41:E9:81:FA:46:21:8B:13:C2:63:F0:3F:10:8A:F7:6A:DB + SHA1 uMvhMH66A8Pbvr9l/YBo+NPgHH0= + SHA256 fQ+gau72iwOf6rmXvY7/QemB+kYhixPCY/A/EIr3ats= - [`mail.fripost.org:443` (webmail)](https://crt.sh/?spkisha256=4877e788c11aa71798a39613ff68cffa7f96b2d35a62084332165469d2e53c39&iCAID=16418&exclude=expired) + [`mail.fripost.org:443`, `webmail.fripost.org:443` (webmail)](https://crt.sh/?spkisha256=4877e788c11aa71798a39613ff68cffa7f96b2d35a62084332165469d2e53c39&iCAID=16418&exclude=expired) - SHA1 4F:E7:42:40:98:35:51:CF:93:65:EF:F2:D1:7C:3C:46:60:64:2C:30 - SHA256 48:77:E7:88:C1:1A:A7:17:98:A3:96:13:FF:68:CF:FA:7F:96:B2:D3:5A:62:08:43:32:16:54:69:D2:E5:3C:39 + SHA1 T+dCQJg1Uc+TZe/y0Xw8RmBkLDA= + SHA256 SHfniMEapxeYo5YT/2jP+n+WstNaYghDMhZUadLlPDk= [`lists.fripost.org:443` (list manager)](https://crt.sh/?spkisha256=38bc7584e12a9c2752ffb660cd3cc097c220fc2c29cf9318f49f458ac860ebfd&iCAID=16418&exclude=expired) - SHA1 E9:45:89:19:95:44:B1:C7:61:C1:75:4B:A1:3F:8C:38:D4:10:A5:33 - SHA256 38:BC:75:84:E1:2A:9C:27:52:FF:B6:60:CD:3C:C0:97:C2:20:FC:2C:29:CF:93:18:F4:9F:45:8A:C8:60:EB:FD + SHA1 6UWJGZVEscdhwXVLoT+MONQQpTM= + SHA256 OLx1hOEqnCdS/7ZgzTzAl8Ig/Cwpz5MY9J9Fishg6/0= [`git.fripost.org:443` (git server and its web interface)](https://crt.sh/?spkisha256=1cea225e00bbb68973677d5beb95336c02a1a42080ec8d2235d3bb344b8bd255&iCAID=16418&exclude=expired) - SHA1 02:D7:7C:F0:16:F4:55:0D:C3:6B:A1:C4:B6:95:1B:65:26:64:C8:28 - SHA256 1C:EA:22:5E:00:BB:B6:89:73:67:7D:5B:EB:95:33:6C:02:A1:A4:20:80:EC:8D:22:35:D3:BB:34:4B:8B:D2:55 + SHA1 Atd88Bb0VQ3Da6HEtpUbZSZkyCg= + SHA256 HOoiXgC7tolzZ31b65UzbAKhpCCA7I0iNdO7NEuL0lU= * SSH server -- cgit v1.2.3 From 65d1cdcdd01500a0ed53bb4c3012cce09906ecc1 Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Tue, 12 Jul 2016 15:59:47 +0200 Subject: gencerts: make the SSHFPR output match the X509 ones. --- website/certs.mdwn | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'website/certs.mdwn') diff --git a/website/certs.mdwn b/website/certs.mdwn index 94e33d4..2a9260a 100644 --- a/website/certs.mdwn +++ b/website/certs.mdwn @@ -74,5 +74,5 @@ from which this fingerprint list was [generated](https://git.fripost.org/fripost `gitolite@git.fripost.org:22` - RSA MD5:0b:e5:47:44:71:cb:41:7d:1e:1b:25:bc:28:e8:c3:a2 - RSA SHA256:zNZXfa/okPm/tV9dl3gNlizfXAghrMSgrcwICiWx+80 + MD5 0b:e5:47:44:71:cb:41:7d:1e:1b:25:bc:28:e8:c3:a2 + SHA256 zNZXfa/okPm/tV9dl3gNlizfXAghrMSgrcwICiWx+80 -- cgit v1.2.3 From 3f919b1f5e3fb6e149612c644aa211f1884bddb6 Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Tue, 12 Jul 2016 23:04:54 +0200 Subject: gencerts: Print the SHA1 digests in hex not base64 format. --- website/certs.mdwn | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) (limited to 'website/certs.mdwn') diff --git a/website/certs.mdwn b/website/certs.mdwn index 2a9260a..86226c7 100644 --- a/website/certs.mdwn +++ b/website/certs.mdwn @@ -23,51 +23,51 @@ from which this fingerprint list was [generated](https://git.fripost.org/fripost [`imap.fripost.org:993` (IMAP over SSL), `sieve.fripost.org:4190` (ManageSieve, `STARTTLS`)](https://crt.sh/?spkisha256=60db1731fcf1f860de7e84c1a2c48cb9cded004750b21fbf67616b13e8ad7de5&iCAID=16418&exclude=expired) - SHA1 ee7CG5taZ9gf39L1KqNo6wL/WvI= + SHA1 79:EE:C2:1B:9B:5A:67:D8:1F:DF:D2:F5:2A:A3:68:EB:02:FF:5A:F2 SHA256 YNsXMfzx+GDefoTBosSMuc3tAEdQsh+/Z2FrE+itfeU= * SMTP servers [`smtp.fripost.org:587` (Mail Submission Agent, `STARTTLS`)](https://crt.sh/?spkisha256=a2726ec6514d6670aaf49008c17a3f28f92ee981e530d10e19d6847ceaa3c905&iCAID=16418&exclude=expired) - SHA1 p9sXS1WUe4+7kF+8SMyZ/Slzx9g= + SHA1 A7:DB:17:4B:55:94:7B:8F:BB:90:5F:BC:48:CC:99:FD:29:73:C7:D8 SHA256 onJuxlFNZnCq9JAIwXo/KPku6YHlMNEOGdaEfOqjyQU= [`mx1.fripost.org:25` (1st Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha256=63c2a1dce0bc20a6cde16eae1cec71cf42270d1e460f039dc2fdea1e274870ba&iCAID=16418&exclude=expired) - SHA1 39cz+5bsOVhOMQU14N/qWSeQ1A0= + SHA1 DF:D7:33:FB:96:EC:39:58:4E:31:05:35:E0:DF:EA:59:27:90:D4:0D SHA256 Y8Kh3OC8IKbN4W6uHOxxz0InDR5GDwOdwv3qHidIcLo= [`mx2.fripost.org:25` (2nd Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha256=9307b7878124e4e79f9871ee88cb9d4a82ea9e7c27065a21a81d902567a8d27a&iCAID=16418&exclude=expired) - SHA1 oIW5UZ/xcTz2YcFqftz0kYpkMhE= + SHA1 A0:85:B9:51:9F:F1:71:3C:F6:61:C1:6A:7E:DC:F4:91:8A:64:32:11 SHA256 kwe3h4Ek5OefmHHuiMudSoLqnnwnBlohqB2QJWeo0no= * Web servers [`fripost.org:443`, `www.fripost.org:443` (website), `wiki.fripost.org:443` (wiki)](https://crt.sh/?spkisha256=7d0fa06aeef68b039feab997bd8eff41e981fa46218b13c263f03f108af76adb&iCAID=16418&exclude=expired) - SHA1 uMvhMH66A8Pbvr9l/YBo+NPgHH0= + SHA1 B8:CB:E1:30:7E:BA:03:C3:DB:BE:BF:65:FD:80:68:F8:D3:E0:1C:7D SHA256 fQ+gau72iwOf6rmXvY7/QemB+kYhixPCY/A/EIr3ats= [`mail.fripost.org:443`, `webmail.fripost.org:443` (webmail)](https://crt.sh/?spkisha256=4877e788c11aa71798a39613ff68cffa7f96b2d35a62084332165469d2e53c39&iCAID=16418&exclude=expired) - SHA1 T+dCQJg1Uc+TZe/y0Xw8RmBkLDA= + SHA1 4F:E7:42:40:98:35:51:CF:93:65:EF:F2:D1:7C:3C:46:60:64:2C:30 SHA256 SHfniMEapxeYo5YT/2jP+n+WstNaYghDMhZUadLlPDk= [`lists.fripost.org:443` (list manager)](https://crt.sh/?spkisha256=38bc7584e12a9c2752ffb660cd3cc097c220fc2c29cf9318f49f458ac860ebfd&iCAID=16418&exclude=expired) - SHA1 6UWJGZVEscdhwXVLoT+MONQQpTM= + SHA1 E9:45:89:19:95:44:B1:C7:61:C1:75:4B:A1:3F:8C:38:D4:10:A5:33 SHA256 OLx1hOEqnCdS/7ZgzTzAl8Ig/Cwpz5MY9J9Fishg6/0= [`git.fripost.org:443` (git server and its web interface)](https://crt.sh/?spkisha256=1cea225e00bbb68973677d5beb95336c02a1a42080ec8d2235d3bb344b8bd255&iCAID=16418&exclude=expired) - SHA1 Atd88Bb0VQ3Da6HEtpUbZSZkyCg= + SHA1 02:D7:7C:F0:16:F4:55:0D:C3:6B:A1:C4:B6:95:1B:65:26:64:C8:28 SHA256 HOoiXgC7tolzZ31b65UzbAKhpCCA7I0iNdO7NEuL0lU= * SSH server -- cgit v1.2.3 From d3cca617d2ed2a14f7b246536bb98e5eabf183ab Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Tue, 12 Jul 2016 23:43:01 +0200 Subject: Improve certs formatting. --- website/certs.mdwn | 49 ++++++++++++++++++++++--------------------------- 1 file changed, 22 insertions(+), 27 deletions(-) (limited to 'website/certs.mdwn') diff --git a/website/certs.mdwn b/website/certs.mdwn index 86226c7..312a93a 100644 --- a/website/certs.mdwn +++ b/website/certs.mdwn @@ -19,60 +19,55 @@ from which this fingerprint list was [generated](https://git.fripost.org/fripost [Commit ID ef43052 from Tue, 12 Jul 2016 03:10:33 +0200](https://git.fripost.org/fripost-ansible/tree/certs/public?id=ef430522256013665205cdda05636846cc622251). - * IMAP server +### IMAP server ### - [`imap.fripost.org:993` (IMAP over SSL), `sieve.fripost.org:4190` (ManageSieve, `STARTTLS`)](https://crt.sh/?spkisha256=60db1731fcf1f860de7e84c1a2c48cb9cded004750b21fbf67616b13e8ad7de5&iCAID=16418&exclude=expired) +[`imap.fripost.org:993` (IMAP over SSL), `sieve.fripost.org:4190` (ManageSieve, `STARTTLS`)](https://crt.sh/?spkisha256=60db1731fcf1f860de7e84c1a2c48cb9cded004750b21fbf67616b13e8ad7de5&iCAID=16418&exclude=expired) - SHA1 79:EE:C2:1B:9B:5A:67:D8:1F:DF:D2:F5:2A:A3:68:EB:02:FF:5A:F2 +: SHA1 79:EE:C2:1B:9B:5A:67:D8:1F:DF:D2:F5:2A:A3:68:EB:02:FF:5A:F2 SHA256 YNsXMfzx+GDefoTBosSMuc3tAEdQsh+/Z2FrE+itfeU= - * SMTP servers +### SMTP servers ### - [`smtp.fripost.org:587` (Mail Submission Agent, `STARTTLS`)](https://crt.sh/?spkisha256=a2726ec6514d6670aaf49008c17a3f28f92ee981e530d10e19d6847ceaa3c905&iCAID=16418&exclude=expired) +[`smtp.fripost.org:587` (Mail Submission Agent, `STARTTLS`)](https://crt.sh/?spkisha256=a2726ec6514d6670aaf49008c17a3f28f92ee981e530d10e19d6847ceaa3c905&iCAID=16418&exclude=expired) - SHA1 A7:DB:17:4B:55:94:7B:8F:BB:90:5F:BC:48:CC:99:FD:29:73:C7:D8 +: SHA1 A7:DB:17:4B:55:94:7B:8F:BB:90:5F:BC:48:CC:99:FD:29:73:C7:D8 SHA256 onJuxlFNZnCq9JAIwXo/KPku6YHlMNEOGdaEfOqjyQU= +[`mx1.fripost.org:25` (1st Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha256=63c2a1dce0bc20a6cde16eae1cec71cf42270d1e460f039dc2fdea1e274870ba&iCAID=16418&exclude=expired) - [`mx1.fripost.org:25` (1st Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha256=63c2a1dce0bc20a6cde16eae1cec71cf42270d1e460f039dc2fdea1e274870ba&iCAID=16418&exclude=expired) - - SHA1 DF:D7:33:FB:96:EC:39:58:4E:31:05:35:E0:DF:EA:59:27:90:D4:0D +: SHA1 DF:D7:33:FB:96:EC:39:58:4E:31:05:35:E0:DF:EA:59:27:90:D4:0D SHA256 Y8Kh3OC8IKbN4W6uHOxxz0InDR5GDwOdwv3qHidIcLo= +[`mx2.fripost.org:25` (2nd Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha256=9307b7878124e4e79f9871ee88cb9d4a82ea9e7c27065a21a81d902567a8d27a&iCAID=16418&exclude=expired) - [`mx2.fripost.org:25` (2nd Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha256=9307b7878124e4e79f9871ee88cb9d4a82ea9e7c27065a21a81d902567a8d27a&iCAID=16418&exclude=expired) - - SHA1 A0:85:B9:51:9F:F1:71:3C:F6:61:C1:6A:7E:DC:F4:91:8A:64:32:11 +: SHA1 A0:85:B9:51:9F:F1:71:3C:F6:61:C1:6A:7E:DC:F4:91:8A:64:32:11 SHA256 kwe3h4Ek5OefmHHuiMudSoLqnnwnBlohqB2QJWeo0no= - * Web servers +### Web servers ### - [`fripost.org:443`, `www.fripost.org:443` (website), `wiki.fripost.org:443` (wiki)](https://crt.sh/?spkisha256=7d0fa06aeef68b039feab997bd8eff41e981fa46218b13c263f03f108af76adb&iCAID=16418&exclude=expired) +[`fripost.org:443`, `www.fripost.org:443` (website), `wiki.fripost.org:443` (wiki)](https://crt.sh/?spkisha256=7d0fa06aeef68b039feab997bd8eff41e981fa46218b13c263f03f108af76adb&iCAID=16418&exclude=expired) - SHA1 B8:CB:E1:30:7E:BA:03:C3:DB:BE:BF:65:FD:80:68:F8:D3:E0:1C:7D +: SHA1 B8:CB:E1:30:7E:BA:03:C3:DB:BE:BF:65:FD:80:68:F8:D3:E0:1C:7D SHA256 fQ+gau72iwOf6rmXvY7/QemB+kYhixPCY/A/EIr3ats= +[`mail.fripost.org:443`, `webmail.fripost.org:443` (webmail)](https://crt.sh/?spkisha256=4877e788c11aa71798a39613ff68cffa7f96b2d35a62084332165469d2e53c39&iCAID=16418&exclude=expired) - [`mail.fripost.org:443`, `webmail.fripost.org:443` (webmail)](https://crt.sh/?spkisha256=4877e788c11aa71798a39613ff68cffa7f96b2d35a62084332165469d2e53c39&iCAID=16418&exclude=expired) - - SHA1 4F:E7:42:40:98:35:51:CF:93:65:EF:F2:D1:7C:3C:46:60:64:2C:30 +: SHA1 4F:E7:42:40:98:35:51:CF:93:65:EF:F2:D1:7C:3C:46:60:64:2C:30 SHA256 SHfniMEapxeYo5YT/2jP+n+WstNaYghDMhZUadLlPDk= +[`lists.fripost.org:443` (list manager)](https://crt.sh/?spkisha256=38bc7584e12a9c2752ffb660cd3cc097c220fc2c29cf9318f49f458ac860ebfd&iCAID=16418&exclude=expired) - [`lists.fripost.org:443` (list manager)](https://crt.sh/?spkisha256=38bc7584e12a9c2752ffb660cd3cc097c220fc2c29cf9318f49f458ac860ebfd&iCAID=16418&exclude=expired) - - SHA1 E9:45:89:19:95:44:B1:C7:61:C1:75:4B:A1:3F:8C:38:D4:10:A5:33 +: SHA1 E9:45:89:19:95:44:B1:C7:61:C1:75:4B:A1:3F:8C:38:D4:10:A5:33 SHA256 OLx1hOEqnCdS/7ZgzTzAl8Ig/Cwpz5MY9J9Fishg6/0= +[`git.fripost.org:443` (git server and its web interface)](https://crt.sh/?spkisha256=1cea225e00bbb68973677d5beb95336c02a1a42080ec8d2235d3bb344b8bd255&iCAID=16418&exclude=expired) - [`git.fripost.org:443` (git server and its web interface)](https://crt.sh/?spkisha256=1cea225e00bbb68973677d5beb95336c02a1a42080ec8d2235d3bb344b8bd255&iCAID=16418&exclude=expired) - - SHA1 02:D7:7C:F0:16:F4:55:0D:C3:6B:A1:C4:B6:95:1B:65:26:64:C8:28 +: SHA1 02:D7:7C:F0:16:F4:55:0D:C3:6B:A1:C4:B6:95:1B:65:26:64:C8:28 SHA256 HOoiXgC7tolzZ31b65UzbAKhpCCA7I0iNdO7NEuL0lU= - * SSH server +### SSH server ### - `gitolite@git.fripost.org:22` +`gitolite@git.fripost.org:22` - MD5 0b:e5:47:44:71:cb:41:7d:1e:1b:25:bc:28:e8:c3:a2 +: MD5 0b:e5:47:44:71:cb:41:7d:1e:1b:25:bc:28:e8:c3:a2 SHA256 zNZXfa/okPm/tV9dl3gNlizfXAghrMSgrcwICiWx+80 -- cgit v1.2.3 From 2387db7e612b5f14deb311a4c98242076db804f4 Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Tue, 10 Jul 2018 23:42:35 +0200 Subject: Add SPKI fingerprints for cloud.fripost.org:443. --- website/certs.mdwn | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'website/certs.mdwn') diff --git a/website/certs.mdwn b/website/certs.mdwn index 312a93a..00dd660 100644 --- a/website/certs.mdwn +++ b/website/certs.mdwn @@ -65,6 +65,11 @@ from which this fingerprint list was [generated](https://git.fripost.org/fripost : SHA1 02:D7:7C:F0:16:F4:55:0D:C3:6B:A1:C4:B6:95:1B:65:26:64:C8:28 SHA256 HOoiXgC7tolzZ31b65UzbAKhpCCA7I0iNdO7NEuL0lU= +[`cloud.fripost.org:443` (lagring för delning)](https://crt.sh/?spkisha256=646f81c006a9bd6a43bbfeb56ab20db829427589dcf13cc24d2036724b5be8cf&iCAID=16418&exclude=expired) + +: SHA1 8F:D6:E2:F1:C8:88:BD:18:83:D7:70:55:D6:A2:D3:89:38:F7:F9:31 + SHA256 ZG+BwAapvWpDu/61arINuClCdYnc8TzCTSA2cktb6M8= + ### SSH server ### `gitolite@git.fripost.org:22` -- cgit v1.2.3 From 49307bd84426efe2a06677eb26d9f723f5257018 Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Mon, 3 Dec 2018 04:00:23 +0100 Subject: certs: Also show the algorithm for SSH host keys. --- website/certs.mdwn | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) (limited to 'website/certs.mdwn') diff --git a/website/certs.mdwn b/website/certs.mdwn index 00dd660..dda1444 100644 --- a/website/certs.mdwn +++ b/website/certs.mdwn @@ -16,7 +16,7 @@ You can view all issued Let's Encrypt certificates at The SPKI of our X.509 certificates are also available in PEM format under our [Git repository](https://git.fripost.org/fripost-ansible/tree/certs/public), from which this fingerprint list was [generated](https://git.fripost.org/fripost-ansible/tree/certs/gencerts.sh), at -[Commit ID ef43052 from Tue, 12 Jul 2016 03:10:33 +0200](https://git.fripost.org/fripost-ansible/tree/certs/public?id=ef430522256013665205cdda05636846cc622251). +[Commit ID 5ad9fc5 from Mon, 3 Dec 2018 03:37:19 +0100](https://git.fripost.org/fripost-ansible/tree/certs/public?id=5ad9fc5e963b9a461f60799d7f185a9e2e13522f). ### IMAP server ### @@ -74,5 +74,7 @@ from which this fingerprint list was [generated](https://git.fripost.org/fripost `gitolite@git.fripost.org:22` -: MD5 0b:e5:47:44:71:cb:41:7d:1e:1b:25:bc:28:e8:c3:a2 - SHA256 zNZXfa/okPm/tV9dl3gNlizfXAghrMSgrcwICiWx+80 +: MD5 0b:e5:47:44:71:cb:41:7d:1e:1b:25:bc:28:e8:c3:a2 (RSA) + MD5 5d:01:75:cc:63:be:48:b7:b9:a6:81:32:75:ff:6b:14 (ED25519) + SHA256 zNZXfa/okPm/tV9dl3gNlizfXAghrMSgrcwICiWx+80 (RSA) + SHA256 e+yJUOdiudYambqIPuAmyVn/Pn+3b/PvS0yWhXiZWGw (ED25519) -- cgit v1.2.3