d53eabedf8
This commit adds TLSA records for all locally-hosted (sub)domains (those with A or AAAA records that match the local box). TLSA records are computed using the build_tlsa_record() method based on the default certificate (or key). Since the default key is the same for all domains hosted on the box, and the TLSA criteria used are 3 1 1, the TLSA record will be the same for all domains. At this point, there is no opt-out mechanism. I'm not sure if this is necessary, nor what would be the best way to do it if it is necessary. |
||
---|---|---|
.. | ||
templates | ||
auth.py | ||
backup.py | ||
csr_country_codes.tsv | ||
daemon.py | ||
daily_tasks.sh | ||
dns_update.py | ||
email_administrator.py | ||
mail_log.py | ||
mailconfig.py | ||
ssl_certificates.py | ||
status_checks.py | ||
utils.py | ||
web_update.py |