diff --git a/debian/wit-network-config.postinst b/debian/wit-network-config.postinst index 08b97ed..01520cd 100755 --- a/debian/wit-network-config.postinst +++ b/debian/wit-network-config.postinst @@ -29,7 +29,7 @@ case "$1" in IPSECCONFIG="etc/ipsec.conf.wit" IPSECSECRETS="etc/ipsec.secrets" CAPATH="/etc/ipsec.d" - CACURLURL="http://bastion" + CACURLURL="https://mirrors.wit.com/wit-ca" ## START gather all the info from the box and generate the variabels HOSTNAME="$(hostname)" @@ -388,7 +388,7 @@ case "$1" in if [ ! -e $KEYFILE ]; then pki --gen --type rsa --size 2048 --outform pem >${KEYFILE} - pki --req --in ${KEYFILE} --type rsa --digest sha512 --dn "C=US, O=Wit, CN=${HOSTNAME}" --san "${HOSTNAME}" --outform pem | curl -6 --fail -T - ${CACURLURL}/reqs/${REQFILE##*/} + pki --req --in ${KEYFILE} --type rsa --digest sha512 --dn "C=US, O=Wit, CN=${HOSTNAME}" --outform pem | curl -6 --fail -T - ${CACURLURL}/reqs/${REQFILE##*/} # we wanna migrate to this DN once the new ipsec.conf is rolled out everywhere #pki --req --in ${KEYFILE} --type rsa --digest sha512 --dn "C=US, O=Wit, OU=DCs, OU=PhyNodes, CN=${HOSTNAME}" --san "${HOSTNAME}" --outform pem | curl -6 --fail -T - ${CACURLURL}/reqs/${REQFILE##*/}