From cab8cba61797ffc1f42fdbce96281c0c89f127aa Mon Sep 17 00:00:00 2001 From: j Date: Wed, 2 Jul 2025 23:36:24 +1000 Subject: [PATCH 1/2] Use sha512 --- deployments/ssl/certmanager.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/deployments/ssl/certmanager.yaml b/deployments/ssl/certmanager.yaml index ec6dfbd..dc37aa5 100644 --- a/deployments/ssl/certmanager.yaml +++ b/deployments/ssl/certmanager.yaml @@ -43,11 +43,11 @@ spec: - dns01: rfc2136: nameserver: hawke.hxst.com.au:53 + tsigKeyName: hxme-update-key + tsigAlgorithm: "hmac-sha512" tsigSecretSecretRef: name: hxme-update-key key: hxme-update-key - tsigAlgorithm: HMACSHA256 - tsigKeyName: hxme-update-key --- apiVersion: cert-manager.io/v1 kind: Certificate From b487416713ef43de241c2f64d08e07ed75b8242f Mon Sep 17 00:00:00 2001 From: j Date: Wed, 2 Jul 2025 23:36:35 +1000 Subject: [PATCH 2/2] quote name idk why --- deployments/ssl/certmanager.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/deployments/ssl/certmanager.yaml b/deployments/ssl/certmanager.yaml index dc37aa5..2daccc3 100644 --- a/deployments/ssl/certmanager.yaml +++ b/deployments/ssl/certmanager.yaml @@ -43,7 +43,7 @@ spec: - dns01: rfc2136: nameserver: hawke.hxst.com.au:53 - tsigKeyName: hxme-update-key + tsigKeyName: "hxme-update-key" tsigAlgorithm: "hmac-sha512" tsigSecretSecretRef: name: hxme-update-key