Mercurial > prosody-modules
changeset 1359:74769c0c79f8
mod_s2s_auth_dane: Verify that the SRV is secure
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Wed, 19 Mar 2014 14:33:10 +0100 (2014-03-19) |
parents | 497e1df4b7ee |
children | 6ee395396333 |
files | mod_s2s_auth_dane/mod_s2s_auth_dane.lua |
diffstat | 1 files changed, 3 insertions(+), 2 deletions(-) [+] |
line wrap: on
line diff
--- a/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Wed Mar 19 14:04:09 2014 +0100 +++ b/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Wed Mar 19 14:33:10 2014 +0100 @@ -81,8 +81,9 @@ end, "_xmpp-server._tcp."..name..".", "SRV"); return true; elseif host_session.direction == "outgoing" then - if not host_session.srv_hosts then return end - local srv_choice = host_session.srv_hosts[host_session.srv_choice]; + local srv_hosts = host_session.srv_hosts; + if not ( srv_hosts and srv_hosts.answer and srv_hosts.answer.secure ) then return end + local srv_choice = srv_hosts[host_session.srv_choice]; host_session.dane = dns_lookup(function(answer) if answer and (answer.secure and #answer > 0) or answer.bogus then srv_choice.dane = answer;