# HG changeset patch # User Kim Alvefur # Date 1399475327 -7200 # Node ID f4e497a53c6e2684aa4aec726f22b14b114d903a # Parent 151aa00559d148460bf479bf8b023450b58fb654 mod_s2s_auth_dane: Change how TLSA support is detected diff -r 151aa00559d1 -r f4e497a53c6e mod_s2s_auth_dane/mod_s2s_auth_dane.lua --- a/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Wed May 07 17:07:10 2014 +0200 +++ b/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Wed May 07 17:08:47 2014 +0200 @@ -28,9 +28,12 @@ local cert_verify_identity = require "util.x509".verify_identity; local pem2der = require"util.x509".pem2der; -if not dns_lookup.types or not dns_lookup.types.TLSA then - module:log("error", "No TLSA support available, DANE will not be supported"); - return +do + local net_dns = require"net.dns"; + if not net_dns.types or not net_dns.types[52] then + module:log("error", "No TLSA support available, DANE will not be supported"); + return + end end local use_map = { ["DANE-EE"] = 3; ["DANE-TA"] = 2; ["PKIX-EE"] = 1; ["PKIX-CA"] = 0 }