Michał Masłowski <[email protected]> writes:

>> and reloaded nginx (on both servers) and prosody.  is something else
>> using tls?  if not, why not? :P
>
> postfix on repo should be.

have you restarted it?

>> ps: hitting "renew" on cacert doesn't work, we have to generate a new
>> csr using the host key.
>>
>>   certtool -q --load-privkey=$host.key --outfile=$host.$today.csr
>
> Do we have a policy of replacing private keys?

i didn't replace them, but we have a key per host while we can have just
a parabola key (easier on configs?).  what are you thinking?

Attachment: pgpdVKuEJTjYa.pgp
Description: PGP signature

_______________________________________________
Dev mailing list
[email protected]
https://lists.parabolagnulinux.org/mailman/listinfo/dev

Reply via email to