|
417
|
1 #summary S2S authentication using DANE |
|
|
2 #labels Stage-Alpha, Type-S2SAuth |
|
|
3 |
|
|
4 = Introduction = |
|
|
5 |
|
|
6 This module implements DANE as described in |
|
|
7 [http://tools.ietf.org/html/draft-miller-xmpp-dnssec-prooftype Using DNS Security Extensions (DNSSEC) and DNS-based Authentication of Named Entities (DANE) as a Prooftype for XMPP Domain Name Associations]. |
|
|
8 |
|
|
9 However it covers only outgoing server-to-server connections. |
|
|
10 |
|
|
11 = Dependecies = |
|
|
12 |
|
|
13 This module requires a DNSSEC aware DNS resolver. Prosodys internal DNS |
|
|
14 module does not support DNSSEC. Therefore, to use this module, a |
|
|
15 replacement is needed, such as |
|
418
|
16 [http://code.zash.se/luaunbound this libunbound and LuaJIT FFI based one]. |
|
417
|
17 |
|
|
18 = Configuration = |
|
|
19 |
|
|
20 This module has no options. Just add it to `modules_enabled`; |
|
|
21 |
|
|
22 {{{ |
|
|
23 modules_enabled = { |
|
|
24 ... |
|
|
25 "s2s_auth_dane"; |
|
|
26 } |
|
|
27 }}} |
|
|
28 |
|
|
29 = Compatibility = |
|
|
30 |
|
|
31 Requires 0.9 or above. |
