comparison util/prosodyctl/check.lua @ 14228:84a72e9cb610

util.prosodyctl.check: Print expected TLSA records in consistent format Same as util.dns now. Question is if this is easy to copy-paste into DNS editors.
author Kim Alvefur <zash@zash.se>
date Fri, 12 Jun 2026 23:09:09 +0200
parents 59c50c76860b
children
comparison
equal deleted inserted replaced
14227:f50685c55a1c 14228:84a72e9cb610
1348 print(" Not valid for HTTPS connections to "..http_host..".") 1348 print(" Not valid for HTTPS connections to "..http_host..".")
1349 cert_ok = false 1349 cert_ok = false
1350 end 1350 end
1351 if use_dane then 1351 if use_dane then
1352 if cert.pubkey then 1352 if cert.pubkey then
1353 print(" DANE: TLSA 3 1 1 "..sha256(pem2der(cert:pubkey()), true)) 1353 print(" DANE: TLSA DANE-EE(3) SPKI(1) SHA2-256(1) "..sha256(pem2der(cert:pubkey()), true))
1354 elseif cert.pem then 1354 elseif cert.pem then
1355 print(" DANE: TLSA 3 0 1 "..sha256(pem2der(cert:pem()), true)) 1355 print(" DANE: TLSA DANE-EE(3) Cert(0) SHA2-256(1) "..sha256(pem2der(cert:pem()), true))
1356 end 1356 end
1357 end 1357 end
1358 end 1358 end
1359 end 1359 end
1360 end 1360 end