Software / code / prosody
Changeset
11710:26a8cc9d9eb7
net.resolvers.service: Only do DANE with secure SRV records
If this seems backwards, that' because it is but the API isn't really
designed to easily pass along details from each resolution step onto the
next.
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Sun, 18 Jul 2021 23:25:45 +0200 |
| parents | 11709:5810166f35d5 |
| children | 11711:6fbbfa4a1178 |
| files | net/resolvers/service.lua |
| diffstat | 1 files changed, 4 insertions(+), 0 deletions(-) [+] |
line wrap: on
line diff
--- a/net/resolvers/service.lua Sun Jul 18 22:46:57 2021 +0200 +++ b/net/resolvers/service.lua Sun Jul 18 23:25:45 2021 +0200 @@ -50,6 +50,10 @@ answer = {}; end if answer then + if self.extra and not answer.secure then + self.extra.use_dane = false; + end + if #answer == 0 then if self.extra and self.extra.default_port then table.insert(targets, { self.hostname, self.extra.default_port, self.conn_type, self.extra });
