mod_s2s_auth_dane: Disable now redundant validation done in trunk Outgoing connections can now be validated natively in trunk since a38f9e09ca31 so we only need to check incoming connections.

author: Kim Alvefur <zash@zash.se>
date: Wed, 03 Mar 2021 11:43:38 +0100
parent: 2869:77498ea07795
child: 4491:35381608d323
--- a/mod_s2s_auth_dane/mod_s2s_auth_dane.lua	Tue Mar 02 19:20:41 2021 +0100
+++ b/mod_s2s_auth_dane/mod_s2s_auth_dane.lua	Wed Mar 03 11:43:38 2021 +0100
@@ -231,6 +231,8 @@
 	end
 end
 
+local new_dane = module:get_option_boolean("use_dane", false);
+
 function module.add_host(module)
 	local function on_new_s2s(event)
 		local host_session = event.origin;
@@ -244,9 +246,11 @@
 		-- Let it run in parallel until we need to check the cert
 	end
 
-	-- New outgoing connections
-	module:hook("stanza/http://etherx.jabber.org/streams:features", on_new_s2s, 501);
-	module:hook("s2sout-authenticate-legacy", on_new_s2s, 200);
+	if not new_dane then
+		-- New outgoing connections
+		module:hook("stanza/http://etherx.jabber.org/streams:features", on_new_s2s, 501);
+		module:hook("s2sout-authenticate-legacy", on_new_s2s, 200);
+	end
 
 	-- New incoming connections
 	module:hook("s2s-stream-features", on_new_s2s, 10);