From df4a2c268cce5528ccda320f99cca0071145a188 Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Thu, 7 Jan 2021 22:21:54 +0100 Subject: cert page: Don't hard-code the intermediate CA. --- website/certs.asc | 50 +++++++++++++++++++++++++------------------------- website/certs.mdwn | 22 +++++++++++----------- 2 files changed, 36 insertions(+), 36 deletions(-) (limited to 'website') diff --git a/website/certs.asc b/website/certs.asc index 1cb6477..176e052 100644 --- a/website/certs.asc +++ b/website/certs.asc @@ -9,10 +9,10 @@ admin@fripost.org These certificates are all issued by the Let's Encrypt Certificate -Authority, and are submitted to Certificate Transparency logs. You can -view all issued Let's Encrypt certificates at crt.sh: +Authority, and are submitted to Certificate Transparency logs. You can +view all issued certificates at crt.sh: - https://crt.sh/?Identity=%25fripost.org&iCAID=16418 + https://crt.sh/?Identity=fripost.org The SPKI of our X.509 certificates are also available in PEM format at: @@ -27,7 +27,7 @@ IMAP server imap.fripost.org:993 (IMAP over TLS), sieve.fripost.org:4190 (ManageSieve, STARTTLS) -: X.509: https://crt.sh/?spkisha256=60db1731fcf1f860de7e84c1a2c48cb9cded004750b21fbf67616b13e8ad7de5&iCAID=16418&exclude=expired +: X.509: https://crt.sh/?spkisha256=60db1731fcf1f860de7e84c1a2c48cb9cded004750b21fbf67616b13e8ad7de5&exclude=expired SPKI: SHA1 79:EE:C2:1B:9B:5A:67:D8:1F:DF:D2:F5:2A:A3:68:EB:02:FF:5A:F2 SHA256 YNsXMfzx+GDefoTBosSMuc3tAEdQsh+/Z2FrE+itfeU= @@ -37,21 +37,21 @@ SMTP servers smtp.fripost.org:465 (Email Submission over TLS), smtp.fripost.org:587 (Email Submission, STARTTLS) -: X.509: https://crt.sh/?spkisha256=a2726ec6514d6670aaf49008c17a3f28f92ee981e530d10e19d6847ceaa3c905&iCAID=16418&exclude=expired +: X.509: https://crt.sh/?spkisha256=a2726ec6514d6670aaf49008c17a3f28f92ee981e530d10e19d6847ceaa3c905&exclude=expired SPKI: SHA1 A7:DB:17:4B:55:94:7B:8F:BB:90:5F:BC:48:CC:99:FD:29:73:C7:D8 SHA256 onJuxlFNZnCq9JAIwXo/KPku6YHlMNEOGdaEfOqjyQU= mx1.fripost.org:25 (1st Mail eXchange, STARTTLS) -: X.509: https://crt.sh/?spkisha256=63c2a1dce0bc20a6cde16eae1cec71cf42270d1e460f039dc2fdea1e274870ba&iCAID=16418&exclude=expired +: X.509: https://crt.sh/?spkisha256=63c2a1dce0bc20a6cde16eae1cec71cf42270d1e460f039dc2fdea1e274870ba&exclude=expired SPKI: SHA1 DF:D7:33:FB:96:EC:39:58:4E:31:05:35:E0:DF:EA:59:27:90:D4:0D SHA256 Y8Kh3OC8IKbN4W6uHOxxz0InDR5GDwOdwv3qHidIcLo= mx2.fripost.org:25 (2nd Mail eXchange, STARTTLS) -: X.509: https://crt.sh/?spkisha256=9307b7878124e4e79f9871ee88cb9d4a82ea9e7c27065a21a81d902567a8d27a&iCAID=16418&exclude=expired +: X.509: https://crt.sh/?spkisha256=9307b7878124e4e79f9871ee88cb9d4a82ea9e7c27065a21a81d902567a8d27a&exclude=expired SPKI: SHA1 A0:85:B9:51:9F:F1:71:3C:F6:61:C1:6A:7E:DC:F4:91:8A:64:32:11 SHA256 kwe3h4Ek5OefmHHuiMudSoLqnnwnBlohqB2QJWeo0no= @@ -61,7 +61,7 @@ Web servers fripost.org:443, www.fripost.org:443 (website), wiki.fripost.org:443 (wiki) -: X.509: https://crt.sh/?spkisha256=7d0fa06aeef68b039feab997bd8eff41e981fa46218b13c263f03f108af76adb&iCAID=16418&exclude=expired +: X.509: https://crt.sh/?spkisha256=7d0fa06aeef68b039feab997bd8eff41e981fa46218b13c263f03f108af76adb&exclude=expired SPKI: SHA1 B8:CB:E1:30:7E:BA:03:C3:DB:BE:BF:65:FD:80:68:F8:D3:E0:1C:7D SHA256 fQ+gau72iwOf6rmXvY7/QemB+kYhixPCY/A/EIr3ats= @@ -70,7 +70,7 @@ fripost.org:443, www.fripost.org:443 (website), wiki.fripost.org:443 (wiki) mail.fripost.org:443, webmail.fripost.org:443 (webmail) -: X.509: https://crt.sh/?spkisha256=4877e788c11aa71798a39613ff68cffa7f96b2d35a62084332165469d2e53c39&iCAID=16418&exclude=expired +: X.509: https://crt.sh/?spkisha256=4877e788c11aa71798a39613ff68cffa7f96b2d35a62084332165469d2e53c39&exclude=expired SPKI: SHA1 4F:E7:42:40:98:35:51:CF:93:65:EF:F2:D1:7C:3C:46:60:64:2C:30 SHA256 SHfniMEapxeYo5YT/2jP+n+WstNaYghDMhZUadLlPDk= @@ -79,7 +79,7 @@ mail.fripost.org:443, webmail.fripost.org:443 (webmail) lists.fripost.org:443 (list manager) -: X.509: https://crt.sh/?spkisha256=38bc7584e12a9c2752ffb660cd3cc097c220fc2c29cf9318f49f458ac860ebfd&iCAID=16418&exclude=expired +: X.509: https://crt.sh/?spkisha256=38bc7584e12a9c2752ffb660cd3cc097c220fc2c29cf9318f49f458ac860ebfd&exclude=expired SPKI: SHA1 E9:45:89:19:95:44:B1:C7:61:C1:75:4B:A1:3F:8C:38:D4:10:A5:33 SHA256 OLx1hOEqnCdS/7ZgzTzAl8Ig/Cwpz5MY9J9Fishg6/0= @@ -88,7 +88,7 @@ lists.fripost.org:443 (list manager) git.fripost.org:443 (git server and its web interface) -: X.509: https://crt.sh/?spkisha256=1cea225e00bbb68973677d5beb95336c02a1a42080ec8d2235d3bb344b8bd255&iCAID=16418&exclude=expired +: X.509: https://crt.sh/?spkisha256=1cea225e00bbb68973677d5beb95336c02a1a42080ec8d2235d3bb344b8bd255&exclude=expired SPKI: SHA1 02:D7:7C:F0:16:F4:55:0D:C3:6B:A1:C4:B6:95:1B:65:26:64:C8:28 SHA256 HOoiXgC7tolzZ31b65UzbAKhpCCA7I0iNdO7NEuL0lU= @@ -97,7 +97,7 @@ git.fripost.org:443 (git server and its web interface) cloud.fripost.org:443 (lagring för delning) -: X.509: https://crt.sh/?spkisha256=646f81c006a9bd6a43bbfeb56ab20db829427589dcf13cc24d2036724b5be8cf&iCAID=16418&exclude=expired +: X.509: https://crt.sh/?spkisha256=646f81c006a9bd6a43bbfeb56ab20db829427589dcf13cc24d2036724b5be8cf&exclude=expired SPKI: SHA1 8F:D6:E2:F1:C8:88:BD:18:83:D7:70:55:D6:A2:D3:89:38:F7:F9:31 SHA256 ZG+BwAapvWpDu/61arINuClCdYnc8TzCTSA2cktb6M8= @@ -116,17 +116,17 @@ gitolite@git.fripost.org:22 -----BEGIN PGP SIGNATURE----- -iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAlyQTmQACgkQ05pJnDwh -pVJrTw/+LfIRfMyh21hsjnqP7SLbin2SltHdb0w+n3mWC9cjbLg/ODyodSoqRGRL -Xnj3hAjTSnYZ8ROJ0d8vVbOmHsFF6Jb0HqiRi6evOb1K2su0Z04OME7u//SxKC2l -IR7HH+Qw37mNN0YadV0SjRiGQTlSjZxbXVk4uIvR4k6u1mVz3USmFY4RQjWLm7hc -vg2Tzji1cBQQP/pJV5DG5JmVTI6u65X/gfIIJIzSTUuZ1uVtd/KkbyXVWQDh16nD -OcnlYBCVYVUD8onm/QGRcajJBu5ife/2iZXFHVQh2/xR9u5K9rVHcWTcbNWMmVbX -bbyUwQmqg3E7UxShKWtjMBh047xIf2+mOuNcyPvsD/ZtAepqfdp6zf6cncJbnYse -9URlF/d8MwmV3K4JLr1pfCFl5+Zaj7U+CziM/lHxgi446dYY8t/xMMjsHqWhiERx -D3ZX86nrpGmLu78o4cYAjoSsGDQTrG8d9+js4+uV//9lgFDFx72tnVUO8VMwrz/A -yh2UW2WDdGPxHYtI5r7k4Rua56cbGB/4iWmi93wet56O1EPeB52uCN+g1KF41KON -F+d2LtyC7e8b8IIh85wHn9zIOiPVShRkmdR2+YFjSfRgVfhqAJWLwHmd6fFJhAj8 -+LO8Wo1bCljnc8wg/Ac9xunOa3Uohb8GFRLQgbWWqhbfEha7bTs= -=vZfN +iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAl/3eyUACgkQ05pJnDwh +pVJP2Q//eS1YmmXewtycgHU3gL/lbjMaYtwZe82ZMT2HGXj6cOhh1yW6qwihZgaD +grADALX/EszPVcwdRkLhfMgYEE/R07ShZVQMeQSpbWfO3f6+25bphVM/hH+p8w24 +WmJwxH53pVcbPjFuGRysoRbPxrLox4KEoQ6it2fBrGlN3IIiuQwhwGZK/J+BEU7H +FDdfZuiYwM0zYxbCt8/FR58pM2U5w4p0M3+KVSMkDwbk+yujQue3wtp7QxJ8pTeJ +MiPq3D5sYvU65cXOO27Gxqp21QezNR/99A63zvZciDi5qb2cyr7nLILljBrkmdyx +F74l5J1qmuNUH3Q+HSZRFG5QorIPnpfZSaiZlVjU4fZlzksnDojzEVh5smYveWfi +T6aPioOhexkkcgSfgk0e1HgRrQsl3YbE/4wz+XYQTaDn0NHEE2UVUpmEB3BwNBi9 +J18/R+dThHw4MFoTX6pGczpFh5qy5n++nb53RS+WH+ZPuLgCbcZGOJqxhndggkLn +S5YFsAgAJ2opUvpUlcrNYFcNY4UJpYeX7xC71nQtIVicfGFUxRz/OHA9nRaihamh +nuUXfaN7d3WRCoPML+yy6XqnmzNma8udgdGZdNMGS0vFEEmIfz6bW6Zt1yzCyPgX +ET2eoOSfY4kekVlwzXKkFjnxI52QP/BWrkqLktiCdgftcJORRK0= +=svPW -----END PGP SIGNATURE----- diff --git a/website/certs.mdwn b/website/certs.mdwn index f5c415d..27b72e6 100644 --- a/website/certs.mdwn +++ b/website/certs.mdwn @@ -11,8 +11,8 @@ the [signed version of this page](/certs.asc).) These certificates are all issued by the [Let's Encrypt Certificate Authority](https://letsencrypt.org), and are submitted to [Certificate Transparency logs](https://www.certificate-transparency.org). -You can view all issued Let's Encrypt certificates at -[crt.sh](https://crt.sh/?Identity=%25fripost.org&iCAID=16418). +You can view all issued certificates at +[crt.sh](https://crt.sh/?Identity=fripost.org). The SPKI of our X.509 certificates are also available in PEM format under our [Git repository](https://git.fripost.org/fripost-ansible/tree/certs/public), from which this fingerprint list was [generated](https://git.fripost.org/fripost-ansible/tree/certs/gencerts.sh), at @@ -21,51 +21,51 @@ from which this fingerprint list was [generated](https://git.fripost.org/fripost ### IMAP server ### -[`imap.fripost.org:993` (IMAP over TLS), `sieve.fripost.org:4190` (ManageSieve, `STARTTLS`)](https://crt.sh/?spkisha256=60db1731fcf1f860de7e84c1a2c48cb9cded004750b21fbf67616b13e8ad7de5&iCAID=16418&exclude=expired) +[`imap.fripost.org:993` (IMAP over TLS), `sieve.fripost.org:4190` (ManageSieve, `STARTTLS`)](https://crt.sh/?spkisha256=60db1731fcf1f860de7e84c1a2c48cb9cded004750b21fbf67616b13e8ad7de5&exclude=expired) : SHA1 79:EE:C2:1B:9B:5A:67:D8:1F:DF:D2:F5:2A:A3:68:EB:02:FF:5A:F2 SHA256 YNsXMfzx+GDefoTBosSMuc3tAEdQsh+/Z2FrE+itfeU= ### SMTP servers ### -[`smtp.fripost.org:465` (Email Submission over TLS), `smtp.fripost.org:587` (Email Submission, `STARTTLS`)](https://crt.sh/?spkisha256=a2726ec6514d6670aaf49008c17a3f28f92ee981e530d10e19d6847ceaa3c905&iCAID=16418&exclude=expired) +[`smtp.fripost.org:465` (Email Submission over TLS), `smtp.fripost.org:587` (Email Submission, `STARTTLS`)](https://crt.sh/?spkisha256=a2726ec6514d6670aaf49008c17a3f28f92ee981e530d10e19d6847ceaa3c905&exclude=expired) : SHA1 A7:DB:17:4B:55:94:7B:8F:BB:90:5F:BC:48:CC:99:FD:29:73:C7:D8 SHA256 onJuxlFNZnCq9JAIwXo/KPku6YHlMNEOGdaEfOqjyQU= -[`mx1.fripost.org:25` (1st Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha256=63c2a1dce0bc20a6cde16eae1cec71cf42270d1e460f039dc2fdea1e274870ba&iCAID=16418&exclude=expired) +[`mx1.fripost.org:25` (1st Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha256=63c2a1dce0bc20a6cde16eae1cec71cf42270d1e460f039dc2fdea1e274870ba&exclude=expired) : SHA1 DF:D7:33:FB:96:EC:39:58:4E:31:05:35:E0:DF:EA:59:27:90:D4:0D SHA256 Y8Kh3OC8IKbN4W6uHOxxz0InDR5GDwOdwv3qHidIcLo= -[`mx2.fripost.org:25` (2nd Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha256=9307b7878124e4e79f9871ee88cb9d4a82ea9e7c27065a21a81d902567a8d27a&iCAID=16418&exclude=expired) +[`mx2.fripost.org:25` (2nd Mail eXchange, `STARTTLS`)](https://crt.sh/?spkisha256=9307b7878124e4e79f9871ee88cb9d4a82ea9e7c27065a21a81d902567a8d27a&exclude=expired) : SHA1 A0:85:B9:51:9F:F1:71:3C:F6:61:C1:6A:7E:DC:F4:91:8A:64:32:11 SHA256 kwe3h4Ek5OefmHHuiMudSoLqnnwnBlohqB2QJWeo0no= ### Web servers ### -[`fripost.org:443`, `www.fripost.org:443` (website), `wiki.fripost.org:443` (wiki)](https://crt.sh/?spkisha256=7d0fa06aeef68b039feab997bd8eff41e981fa46218b13c263f03f108af76adb&iCAID=16418&exclude=expired) +[`fripost.org:443`, `www.fripost.org:443` (website), `wiki.fripost.org:443` (wiki)](https://crt.sh/?spkisha256=7d0fa06aeef68b039feab997bd8eff41e981fa46218b13c263f03f108af76adb&exclude=expired) : SHA1 B8:CB:E1:30:7E:BA:03:C3:DB:BE:BF:65:FD:80:68:F8:D3:E0:1C:7D SHA256 fQ+gau72iwOf6rmXvY7/QemB+kYhixPCY/A/EIr3ats= -[`mail.fripost.org:443`, `webmail.fripost.org:443` (webmail)](https://crt.sh/?spkisha256=4877e788c11aa71798a39613ff68cffa7f96b2d35a62084332165469d2e53c39&iCAID=16418&exclude=expired) +[`mail.fripost.org:443`, `webmail.fripost.org:443` (webmail)](https://crt.sh/?spkisha256=4877e788c11aa71798a39613ff68cffa7f96b2d35a62084332165469d2e53c39&exclude=expired) : SHA1 4F:E7:42:40:98:35:51:CF:93:65:EF:F2:D1:7C:3C:46:60:64:2C:30 SHA256 SHfniMEapxeYo5YT/2jP+n+WstNaYghDMhZUadLlPDk= -[`lists.fripost.org:443` (list manager)](https://crt.sh/?spkisha256=38bc7584e12a9c2752ffb660cd3cc097c220fc2c29cf9318f49f458ac860ebfd&iCAID=16418&exclude=expired) +[`lists.fripost.org:443` (list manager)](https://crt.sh/?spkisha256=38bc7584e12a9c2752ffb660cd3cc097c220fc2c29cf9318f49f458ac860ebfd&exclude=expired) : SHA1 E9:45:89:19:95:44:B1:C7:61:C1:75:4B:A1:3F:8C:38:D4:10:A5:33 SHA256 OLx1hOEqnCdS/7ZgzTzAl8Ig/Cwpz5MY9J9Fishg6/0= -[`git.fripost.org:443` (git server and its web interface)](https://crt.sh/?spkisha256=1cea225e00bbb68973677d5beb95336c02a1a42080ec8d2235d3bb344b8bd255&iCAID=16418&exclude=expired) +[`git.fripost.org:443` (git server and its web interface)](https://crt.sh/?spkisha256=1cea225e00bbb68973677d5beb95336c02a1a42080ec8d2235d3bb344b8bd255&exclude=expired) : SHA1 02:D7:7C:F0:16:F4:55:0D:C3:6B:A1:C4:B6:95:1B:65:26:64:C8:28 SHA256 HOoiXgC7tolzZ31b65UzbAKhpCCA7I0iNdO7NEuL0lU= -[`cloud.fripost.org:443` (lagring för delning)](https://crt.sh/?spkisha256=646f81c006a9bd6a43bbfeb56ab20db829427589dcf13cc24d2036724b5be8cf&iCAID=16418&exclude=expired) +[`cloud.fripost.org:443` (lagring för delning)](https://crt.sh/?spkisha256=646f81c006a9bd6a43bbfeb56ab20db829427589dcf13cc24d2036724b5be8cf&exclude=expired) : SHA1 8F:D6:E2:F1:C8:88:BD:18:83:D7:70:55:D6:A2:D3:89:38:F7:F9:31 SHA256 ZG+BwAapvWpDu/61arINuClCdYnc8TzCTSA2cktb6M8= -- cgit v1.2.3