From c0e64dd8ed531a8f107d32c678d2c6d9697cac60 Mon Sep 17 00:00:00 2001
Message-Id: <c0e64dd8ed531a8f107d32c678d2c6d9697cac60.1714179744.git.mdw@distorted.org.uk>
From: Mark Wooding <mdw@chiark.greenend.org.uk>
Date: Wed, 27 Jun 2018 09:31:34 +0100
Subject: [PATCH] distorted.lisp: Publish a TLSA record for `rawk'.
Organization: Straylight/Edgeware

From: Mark Wooding <mdw@distorted.org.uk>

This now has active TLS.
---
 distorted.lisp | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/distorted.lisp b/distorted.lisp
index 54d5dd8..88c9bd2 100644
--- a/distorted.lisp
+++ b/distorted.lisp
@@ -169,6 +169,9 @@ (defzone distorted.org.uk
 
   ;; Local services.
   (rawk (unsafe :svc artist.unsafe) (dmz :svc artist.dmz))
+  (rawk :tlsa (:https (:service-certificate-constraint
+		       :public-key :sha-256
+		       #p"https-artist")))
   (mirror (dmz :svc roadstar.dmz :sshfp "roadstar")
 	  (unsafe :svc roadstar.unsafe :sshfp "roadstar"))
 
-- 
[mdw]