From d7e8356cfadf899a089e121b448cd993e63a9194 Mon Sep 17 00:00:00 2001 From: olli Date: Thu, 22 Feb 2024 16:49:04 +0100 Subject: [PATCH] mailcow.yml aktualisiert --- mailcow.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mailcow.yml b/mailcow.yml index e1ea448..2994dc9 100644 --- a/mailcow.yml +++ b/mailcow.yml @@ -441,7 +441,7 @@ certname=$(openssl x509 -noout -subject -in ${cert} 2>/dev/null | sed -nE 's/.*CN ?= ?(.*)/\1/; s/[ ,*]/_/g; s/__/_/g; s/_-_/-/; s/^_//g;p' | tr '[:upper:]' '[:lower:]').pem [ "${certname}" != "${host}.pem" ] && continue tlsa=$(openssl x509 -in "${cert}" -noout -pubkey 2>/dev/null | openssl rsa -pubin -outform DER 2>/dev/null | openssl dgst -sha256 -hex 2>/dev/null | cut -d" " -f2) - dnstlsa=$(host -t TLSA *._tcp.${host} | cut -d" " -f 8,9 | tr '[:upper:]' '[:lower:]' | sed 's/ //g') + dnstlsa=$(host -t TLSA *._tcp.${host} | cut -d" " -f 8,9 | tr '[:upper:]' '[:lower:]' | sed ':a;N;$!ba;s/\n/ /g' | sed 's/ //g') echo ${dnstlsa} | egrep -q "^bereached$" && continue [ "${tlsa}" != "${dnstlsa}" ] && g_echo_error "DNS TLSA incorrect! *._tcp.${host} should be ${tlsa} but is ${dnstlsa} (host -t TLSA *._tcp.${host})" done