From 8afec8982a03946c92b3bde00ac5776fed9bc197 Mon Sep 17 00:00:00 2001
Message-Id: <8afec8982a03946c92b3bde00ac5776fed9bc197.1715406813.git.mdw@distorted.org.uk>
From: Mark Wooding <mdw@chiark.greenend.org.uk>
Date: Tue, 26 Jun 2018 16:48:54 +0100
Subject: [PATCH] config.m4: Present a LetsEncrypt certificate to external
 clients.
Organization: Straylight/Edgeware

From: Mark Wooding <mdw@distorted.org.uk>

---
 config.m4 | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/config.m4 b/config.m4
index db6b966..a9b30b8 100644
--- a/config.m4
+++ b/config.m4
@@ -80,7 +80,11 @@ DEFCONF(relay_clients, <m4_dnl
 )
 
 ## TLS certificate list.
-DEFCONF(certlist, CONF_sysconf_dir/server.certlist)
+DEFCONF(certlist,
+<:m4_ifelse(t, m4_ifelse(MODE, hub, nil, MODE, srv, nil, t),
+<:CONF_sysconf_dir/server.certlist:>,
+<:CONF_sysconf_dir/${if match_ip{$sender_host_address}{+trusted} \
+	{server}{letsencrypt}}.certlist:>):>)
 
 ## TLS-related settings.  We're assuming GNUTLS here, rather than OpenSSL.
 ## For local connections we are very strict.  For random clients, we try
-- 
[mdw]