Changeset

11420:f768db80aee0

net.resolvers.basic: Don't enable DANE with zero TLSA records Turns out it doesn't work with zero.
author Kim Alvefur <zash@zash.se>
date Wed, 03 Mar 2021 18:42:54 +0100
parents 11419:2c26dfc1977f
children 11421:926d53af9a7a
files net/resolvers/basic.lua
diffstat 1 files changed, 1 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/net/resolvers/basic.lua	Wed Mar 03 13:34:00 2021 +0100
+++ b/net/resolvers/basic.lua	Wed Mar 03 18:42:54 2021 +0100
@@ -37,7 +37,7 @@
 		if n > 0 then return; end
 		self.targets = targets;
 		if self.extra and self.extra.use_dane then
-			if secure then
+			if secure and tlsa[1] then
 				self.extra.tlsa = tlsa;
 				self.extra.dane_hostname = self.hostname;
 			else