mailcow.yml aktualisiert

2023-12-18 14:19:34 +01:00 · 2023-12-18 14:19:34 +01:00 · c2d7caec4d
commit c2d7caec4d
parent 1816b87083
1 changed files with 1 additions and 0 deletions
--- a/mailcow.yml
+++ b/mailcow.yml
@ -442,6 +442,7 @@
            [ "${certname}" != "${host}.pem" ] && continue
            tlsa=$(openssl x509 -in "${cert}" -noout -pubkey 2>/dev/null | openssl rsa -pubin -outform DER 2>/dev/null | openssl dgst -sha256 -hex 2>/dev/null | cut -d" " -f2)
            dnstlsa=$(host -t TLSA *._tcp.${host} | cut -d" " -f 8,9 | tr '[:upper:]' '[:lower:]' | sed 's/ //g')
+            echo ${dnstlsa} | egrep -q "^bereached$" && continue
            [ "${tlsa}" != "${dnstlsa}" ] && g_echo_error "DNS TLSA incorrect! *._tcp.${host} should be ${tlsa} but is ${dnstlsa} (host -t TLSA *._tcp.${host})"
          done
          rm *.pem