Mercurial > prosody-wiki
view mod_s2s_auth_dane.wiki @ 419:fdff0de712a7
mod_s2s_auth_fingerprint: Describe how to change the digest. (thanks hardfalcon)
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Sun, 19 Jan 2014 22:38:16 +0100 |
parents | 31cf9ab1d440 |
children | fae8b0661edf |
line wrap: on
line source
#summary S2S authentication using DANE #labels Stage-Alpha, Type-S2SAuth = Introduction = This module implements DANE as described in [http://tools.ietf.org/html/draft-miller-xmpp-dnssec-prooftype Using DNS Security Extensions (DNSSEC) and DNS-based Authentication of Named Entities (DANE) as a Prooftype for XMPP Domain Name Associations]. However it covers only outgoing server-to-server connections. = Dependecies = This module requires a DNSSEC aware DNS resolver. Prosodys internal DNS module does not support DNSSEC. Therefore, to use this module, a replacement is needed, such as [http://code.zash.se/luaunbound this libunbound and LuaJIT FFI based one]. = Configuration = This module has no options. Just add it to `modules_enabled`; {{{ modules_enabled = { ... "s2s_auth_dane"; } }}} = Compatibility = Requires 0.9 or above.