From 0ed17847d32885b3400dd7f33920898445a7a505 Mon Sep 17 00:00:00 2001
From: Alejandro Soto <alejandro@34project.org>
Date: Sat, 20 Jul 2024 16:02:20 -0600
Subject: sys/pki: initial commit, declares mail-fullchain-crl

---
 sys/mail/default.nix | 9 +--------
 1 file changed, 1 insertion(+), 8 deletions(-)

(limited to 'sys/mail/default.nix')

diff --git a/sys/mail/default.nix b/sys/mail/default.nix
index 5b7e4b5..71678e3 100644
--- a/sys/mail/default.nix
+++ b/sys/mail/default.nix
@@ -106,14 +106,7 @@ in
 
             #TODO: automatizar implantación de archivo de CA
 
-            # Orden de concatenación de mail-fullchain-crl.crt:
-            # - Issuing CA cert
-            # - Issuing CA CRL
-            # - Intermediate CA cert
-            # - Intermediate CA CRL
-            # - Root CA cert
-            # - Root CA CRL
-            ssl_ca = </var/trust/ca/mail-fullchain-crl.crt
+            ssl_ca = <${config.local.ca.chains.mail-fullchain-crl}
             ssl_require_crl = yes
             ssl_verify_client_cert = yes
 
-- 
cgit v1.2.3