comparison mod_s2s_auth_dane/mod_s2s_auth_dane.lua @ 1971:54405541d0ba

mod_s2s_auth_dane: Abort on bogus reply to SRV lookup
author Kim Alvefur <zash@zash.se>
date Sat, 12 Dec 2015 16:59:49 +0100
parents 5ea6f4e6fa8c
children b10118d7c0df
comparison
equal deleted inserted replaced
1970:5ea6f4e6fa8c 1971:54405541d0ba
90 if not answer then 90 if not answer then
91 log("debug", "Resolver error: %s", tostring(err)); 91 log("debug", "Resolver error: %s", tostring(err));
92 return cb(host_session); 92 return cb(host_session);
93 end 93 end
94 94
95 if not answer.secure then 95 if answer.bogus then
96 log("warn", "Results are bogus!");
97 -- Bad sign, probably not a good idea to do any fallback here
98 host_session.dane = answer;
99 elseif not answer.secure then
96 log("debug", "Results are not secure"); 100 log("debug", "Results are not secure");
97 return cb(host_session); 101 return cb(host_session);
98 end 102 end
99 103
100 local n = answer.n or #answer; 104 local n = answer.n or #answer;