Log

mod_s2s_auth_dane/mod_s2s_auth_dane.lua @ 1951:7974a24d29b6

description author age
mod_s2s_auth_dane: Consider TLSA records with PKIX uses as supported (if enabled) even if the chain is invalid (if no match is found the session is considered insecure) Kim Alvefur Mon, 16 Nov 2015 18:03:41 +0100
mod_s2s_auth_dane: Consider the current certificate chain status before checking PKIX-{EE,CA} TLSA records Kim Alvefur Thu, 05 Nov 2015 15:38:31 +0100
mod_s2s_auth_dane: Support servers without SRV records by falling back to port 5269 and the bare hostname for TLSA lookups Kim Alvefur Thu, 05 Nov 2015 14:10:11 +0100