view mod_s2s_auth_dane.wiki @ 440:6e91b7ab36c1

update
author Kim Alvefur <zash@zash.se>
date Tue, 18 Mar 2014 15:10:53 +0100
parents fae8b0661edf
children 80ce8d7f7f56
line wrap: on
line source

#summary S2S authentication using DANE
#labels Stage-Alpha, Type-S2SAuth

= Introduction =

This module implements DANE as described in 
[http://tools.ietf.org/html/draft-miller-xmpp-dnssec-prooftype Using DNS Security Extensions (DNSSEC) and DNS-based Authentication of Named Entities (DANE) as a Prooftype for XMPP Domain Name Associations].

= Dependecies =

This module requires a DNSSEC aware DNS resolver.  Prosodys internal DNS 
module does not support DNSSEC.  Therefore, to use this module, a 
replacement is needed, such as
[http://code.zash.se/luaunbound this libunbound and LuaJIT FFI based one].

= Configuration =

This module has no options.  Just add it to `modules_enabled`;

{{{
modules_enabled = {
	...
	"s2s_auth_dane";
}
}}}

= DNS Setup =

{{{
_xmpp-server._tcp IN SRV 0 0 5269 xmpp
_5269._tcp.xmpp IN TLSA 3 0 1 E3B0C44298FC1C149AFBF4C8996FB92427AE41E4649B934CA495991B7852B855
}}}

= Compatibility =

Requires 0.9 or above.