DuckCorp » DuckCorp Infrastructure

Updated TLS configuration on Orfeo to use the one-file PEM generated by ca-certificates (see #184). Only trusted certificates are added to the list now, so this won't cause any problem.

I added the DC and MP domains to verification (verify mode), so we need to watch and ensure it works well. Later we should try turning it to secure mode.

We should also add TLS support to Toushirou when the configuration details are validated on Orfeo.

Fixed Orfeo not using the right certificate.

Added TLS support for Toushirou, but had a strange problem where a trusted connection is well made with mx1 but Toushirou wants to send to mx0.hivane.net for an unknown reason. As Hivane does not provide TLS, we may have to lower the security level temporarily. I'll ask them about this feature.

We are using TLSA from now on, so there is no need to care about this anymore.