From nobody Mon Feb 6 06:57:16 2023 X-Original-To: dev-commits-doc-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4P9HBN646pz3ncBc for ; Mon, 6 Feb 2023 06:57:16 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4P9HBN5XTFz3CVH; Mon, 6 Feb 2023 06:57:16 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1675666636; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=cCZe1BOJk/78SuoAOWlD5fSQj1eZ2k92x0Cxb8qEqE8=; b=Wx5Q4jevdZrtJ+s20SIr57LQxS2a1H1spnPG5rqZFqsge5ZkY+etbftZJ2D3+YcwSL3oaq RkLnDwPnCpynZ9FmHbyvPY7iTPsQfXzYhZUoGX3rVm0mkOhgugm4rw5MXleD3gDcTCCq6Y 6s/H/VjnIihzFS9jeGAHM5bKr16uRUE9Z/MS3IT0fnugj+WvpnZ25RlRVpbV4GKHMEOnuW lMlqYTmrCZXp+Dk6Wyyw+AnwqimKpmGYFzkPkfYYiIh5i07FGSAgasdLFZxEKHgQ4fVK6E +y6GqBWRXQyTCEPKtcYn7L+AxrdyLZQWEFsIRA6HBv5LGJaFGItvQENJo7jb/A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1675666636; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=cCZe1BOJk/78SuoAOWlD5fSQj1eZ2k92x0Cxb8qEqE8=; b=I26ZoOeC1qiYDTNrjXN7OfQUj5SW+TXY4gqbcarxrS+tRT6WgvUeIT0PcQdbiXw5f9dhmz o0eR55qKSOltOt8W00CBFMcPICvQ+xxlJ8zN+m/7ME75sX+f+UXs498o378Bu/wxm7yBd9 nkT6KXjo7BvRBqrgUXk3MrBNoLR4dP3bwtHLwSPwRUVpFxnuXt0zmQ8qbJVDZ1LzmA6xD8 +omzvClfyatObwNYnIYdgP26C7ttUFC9uKojnkj8PO0TlNee2TxLdbte6SwmJeRCDTahP/ BuvkdvlBBdgKVQzSHAnF8SQ7Q3RFCULDZc1fwrmDl3Xmo1qzra7jd/LoDXGKAQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1675666636; a=rsa-sha256; cv=none; b=yE023axow/LJ+3fwchf8Vd0uEBBfdm02gAVzBk05A2zumZSSGc3mCdV+Xefu6rJb5vCnC0 4xeRuFqDMuBNUnMD5vcIYPkaXbmbgxeTf9d/aKEOwchDQ7qyCCbsDSOs6q2L9IAK/PX2oO 9H/SJzo3JbuA5nrrfA3urXxea6DSZp5FnfmzCoYupLXMR/nM8mmzUSyn7M060v+kiXD/RE FJDCw5SDj4M8qUnh6lir/A9GOLGAfMtORRAgfod8iVqVotrZwV75wA2u7Hvb9GM+zIcH58 lE8hhCVtnlHxmiprnbIEkvQGGQpyREzmKOqY43qonPDQd1e74eiZeykgkmOtpw== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4P9HBN4XtLzQRb; Mon, 6 Feb 2023 06:57:16 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.16.1/8.16.1) with ESMTP id 3166vGRE031254; Mon, 6 Feb 2023 06:57:16 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.16.1/8.16.1/Submit) id 3166vGNA031253; Mon, 6 Feb 2023 06:57:16 GMT (envelope-from git) Date: Mon, 6 Feb 2023 06:57:16 GMT Message-Id: <202302060657.3166vGNA031253@gitrepo.freebsd.org> To: doc-committers@FreeBSD.org, dev-commits-doc-all@FreeBSD.org From: Wolfram Schneider Subject: git: d3c43b50d8 - main - remove stale cgi script /cgi/fingerprints.cgi List-Id: Commit messages for all branches of the doc repository List-Archive: https://lists.freebsd.org/archives/dev-commits-doc-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-doc-all@freebsd.org X-BeenThere: dev-commits-doc-all@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: wosch X-Git-Repository: doc X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: d3c43b50d8ab5894cb199ae31b41558e097c5a1a Auto-Submitted: auto-generated X-ThisMailContainsUnwantedMimeParts: N The branch main has been updated by wosch: URL: https://cgit.FreeBSD.org/doc/commit/?id=d3c43b50d8ab5894cb199ae31b41558e097c5a1a commit d3c43b50d8ab5894cb199ae31b41558e097c5a1a Author: Wolfram Schneider AuthorDate: 2023-02-06 06:56:07 +0000 Commit: Wolfram Schneider CommitDate: 2023-02-06 06:56:07 +0000 remove stale cgi script /cgi/fingerprints.cgi The script fingerprints.cgi is no longer really in use and there are better tools as ldns-dane(1) to validation TLSA records. Approved by: peter, philip --- website/content/en/cgi/fingerprints.cgi | 58 --------------------------------- 1 file changed, 58 deletions(-) diff --git a/website/content/en/cgi/fingerprints.cgi b/website/content/en/cgi/fingerprints.cgi deleted file mode 100755 index bc99be8985..0000000000 --- a/website/content/en/cgi/fingerprints.cgi +++ /dev/null @@ -1,58 +0,0 @@ -#!/usr/bin/perl -T -# -# Display current HTTPS/SSL/TLS certificate fingerprints. -# Should be replaced with something better. -# -# $FreeBSD$ - -require "./cgi-lib.pl"; -require "./cgi-style.pl"; -$ENV{PATH} = '/bin:/usr/bin'; - -# There is an internal post-renew propagation window of about 5-10 minutes. -# However, the script is expensive so we leverage the cache. The problem -# is that people could come here immediately after a fingerprint mismatch -# so we have to be quick to update. -print "Cache-control: public; max-age=120\n"; # 2 minutes -print &short_html_header("FreeBSD HTTPS/SSL/TLS Server Certificate Fingerprints"); - -print qq{

FreeBSD HTTPS/SSL/TLS Server Certificate Fingerprints

\n}; -print qq{

The FreeBSD Project makes use of Let's Encrypt certificates for many of its HTTPS/SSL/TLS services. These certificates are automatically updated every 60 days. The current certificate fingerprints of significant services are listed below.

\n}; - -# Note: These are all case sensitive. Use lower case to match the file names. -&Fingerprint('git.freebsd.org'); -&Fingerprint('svn.freebsd.org'); -&Fingerprint('download.freebsd.org'); -&Fingerprint('pkg.freebsd.org'); - -print qq{

These fingerprints may be helpful in situations where automatic verification is not available.

\n}; -print &html_footer; -exit 0; - -sub Fingerprint -{ - my ($domain) = @_; - - my $message; - my $sha1, $sha256; - if ( -e "/etc/clusteradm/acme-certs/$domain.crt" ) { - $sha1 = `/usr/bin/openssl x509 -fingerprint -noout -sha1 -in /etc/clusteradm/acme-certs/$domain.crt`; - $sha256 = `/usr/bin/openssl x509 -fingerprint -noout -sha256 -in /etc/clusteradm/acme-certs/$domain.crt`; - chomp($sha1); - chomp($sha256); - $sha1 =~ s/^.*=//; - $sha256 =~ s/^.*=//; - } else { - $sha1 = 'Error'; - $sha256 = 'Error'; - } - - $message = qq{

The fingerprints of the current $domain certificate are:

\n}; - $message .= qq{
}; - $message .= qq{}; - $message .= qq{}; - $message .= qq{}; - $message .= qq{
HashFingerprint
SHA1$sha1
SHA256$sha256
\n}; - - print $message; -}