From 6ed2f2ef03570cd234c7cb6ccca38f953b8c063d Mon Sep 17 00:00:00 2001 From: Andrew Cady Date: Sun, 1 May 2016 00:11:51 -0400 Subject: switch to new X3 certificate --- acme-certify.hs | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'acme-certify.hs') diff --git a/acme-certify.hs b/acme-certify.hs index 94891d0..84c26c6 100644 --- a/acme-certify.hs +++ b/acme-certify.hs @@ -34,7 +34,7 @@ import Network.ACME (HttpProvisioner, Keys (..), ensureWritableDir, provisionViaFile, readKeys, ()) -import Network.ACME.Issuer (letsEncryptX1CrossSigned) +import Network.ACME.Issuer (letsEncryptX3CrossSigned) import Network.URI import OpenSSL import OpenSSL.DH @@ -233,7 +233,7 @@ readSignedObject = runUpdate :: UpdateOpts -> IO () runUpdate UpdateOpts { .. } = do - issuerCert <- readX509 letsEncryptX1CrossSigned + issuerCert <- readX509 letsEncryptX3CrossSigned config <- Config.load "config.yaml" hostsConfig <- Config.subconfig "hosts" config @@ -369,7 +369,7 @@ runCertify CertifyOpts{..} = do requestDomains = map domainName' optDomains email = either (error . ("Error: invalid email address: " ++)) id . validate . fromString <$> optEmail - issuerCert <- readX509 letsEncryptX1CrossSigned + issuerCert <- readX509 letsEncryptX3CrossSigned -- TODO: Don't use fixed issuer certificate. It changed before; it will again. seq email (return ()) createDirectoryIfMissing False domainDir -- cgit v1.2.3