# HG changeset patch # User Kim Alvefur # Date 1394369069 -3600 # Node ID ae0558230e3dc32b52990078ff658d9b2c8c5ac2 # Parent faf4bd226cad7a6f9a4aa39dd5f0ab32e205e018 mod_s2s_auth_dane: Do DANE lookups on outgoing stream features diff -r faf4bd226cad -r ae0558230e3d mod_s2s_auth_dane/mod_s2s_auth_dane.lua --- a/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Sun Mar 09 13:43:27 2014 +0100 +++ b/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Sun Mar 09 13:44:29 2014 +0100 @@ -128,9 +128,9 @@ -- DANE for s2sin -- Looks for TLSA at the same QNAME as the SRV record - module:hook("stanza/urn:ietf:params:xml:ns:xmpp-tls:starttls", function(event) + module:hook("s2s-stream-features", function(event) local origin = event.origin; - if not origin.from_host then return end + if not origin.from_host or origin.dane == nil then return end origin.dane = dns_lookup(function(answer) if answer and ( #answer > 0 or answer.bogus ) then