Mercurial > prosody-wiki

comparison mod_s2s_auth_dane.wiki @ 440:6e91b7ab36c1

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
update
author Kim Alvefur <zash@zash.se>
date Tue, 18 Mar 2014 15:10:53 +0100
parents fae8b0661edf
children 80ce8d7f7f56
comparison
equal deleted inserted replaced
439:c51d25707d4c 440:6e91b7ab36c1
3 3
4 = Introduction = 4 = Introduction =
5 5
6 This module implements DANE as described in 6 This module implements DANE as described in
7 [http://tools.ietf.org/html/draft-miller-xmpp-dnssec-prooftype Using DNS Security Extensions (DNSSEC) and DNS-based Authentication of Named Entities (DANE) as a Prooftype for XMPP Domain Name Associations]. 7 [http://tools.ietf.org/html/draft-miller-xmpp-dnssec-prooftype Using DNS Security Extensions (DNSSEC) and DNS-based Authentication of Named Entities (DANE) as a Prooftype for XMPP Domain Name Associations].
8
9 However it covers only outgoing server-to-server connections.
10
11 For incoming connections, an experimental method is used, but requires another TLSA record.
12 8
13 = Dependecies = 9 = Dependecies =
14 10
15 This module requires a DNSSEC aware DNS resolver. Prosodys internal DNS 11 This module requires a DNSSEC aware DNS resolver. Prosodys internal DNS
16 module does not support DNSSEC. Therefore, to use this module, a 12 module does not support DNSSEC. Therefore, to use this module, a
31 = DNS Setup = 27 = DNS Setup =
32 28
33 {{{ 29 {{{
34 _xmpp-server._tcp IN SRV 0 0 5269 xmpp 30 _xmpp-server._tcp IN SRV 0 0 5269 xmpp
35 _5269._tcp.xmpp IN TLSA 3 0 1 E3B0C44298FC1C149AFBF4C8996FB92427AE41E4649B934CA495991B7852B855 31 _5269._tcp.xmpp IN TLSA 3 0 1 E3B0C44298FC1C149AFBF4C8996FB92427AE41E4649B934CA495991B7852B855
36 _xmpp-server IN TLSA 3 0 1 E3B0C44298FC1C149AFBF4C8996FB92427AE41E4649B934CA495991B7852B855
37 }}} 32 }}}
38 33
39 = Compatibility = 34 = Compatibility =
40 35
41 Requires 0.9 or above. 36 Requires 0.9 or above.