starred/certbot-certbot
1
0
Fork 0
mirror of https://github.com/certbot/certbot.git synced 2026-07-30 18:04:31 +02:00
Code Issues Packages Projects Releases Wiki Activity

Simplify SPKI hash usage

Browse Source
This commit is contained in:
jsha
2014-06-06 13:44:03 -07:00
parent 31db3b7034
commit fa5acdf674
1 changed files with 4 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+4 -18
View File
@@ -68,35 +68,21 @@ The basic file format will be JSON with comments (http://blog.getify.com/json-co
"require-tls": true, "require-tls": true,
"min-tls-version": "TLSv1.1", "min-tls-version": "TLSv1.1",
"enforce-mode": "enforce" "enforce-mode": "enforce"
"accept-pinset": "eff", "accept-spki-hashes": [
"sha1/5R0zeLx7EWRxqw6HRlgCRxNLHDo=",
"sha1/YlrkMlC6C4SJRZSVyRvnvoJ+8eM="
]
} }
"google.com": { "google.com": {
"require-valid-certificate": true, "require-valid-certificate": true,
"min-tls-version": "TLSv1.1", "min-tls-version": "TLSv1.1",
"enforce-mode": "log-only", "enforce-mode": "log-only",
// error-notification domains *
"error-notification": "https://google.com/post/reports/here" "error-notification": "https://google.com/post/reports/here"
}, },
"yahoodns.net": { "yahoodns.net": {
"require-valid-certificate": true, "require-valid-certificate": true,
} }
} }
// Similar to
// https://src.chromium.org/chrome/trunk/src/net/http/transport_security_state_static.json
"pinsets": [
{
"name": "eff",
"static_spki_hashes": [
"EFFBackup2048",
"StartCom Class 2 Primary Intermediate Server CA"
]
}
],
"spki_hashes": {
// Not real SPKI hashes, just examples
"EFFBackup2048": "sha1/5R0zeLx7EWRxqw6HRlgCRxNLHDo=",
"StartCom Class 2 Primary Intermediate Server CA": "sha1/YlrkMlC6C4SJRZSVyRvnvoJ+8eM="
}
} }