mod_s2s_auth_dane_in: Fix caching SHA2-512 hash This unintentionally stored the SHA2-512 hash in the slot for SHA2-256, so that if something compares the same entry again against a SHA2-256 hash it would fail. However a matching SHA2-512 entry should still match. RFC 7671 RECOMMENDS SHA2-256 so SHA2-512 entries are expected to be less common. DANE support not being enabled by default. Expected impact is low.

--- a/plugins/mod_s2s_auth_dane_in.lua	Sun Aug 03 15:14:20 2025 +0200
+++ b/plugins/mod_s2s_auth_dane_in.lua	Tue Aug 05 21:49:58 2025 +0200
@@ -51,7 +51,7 @@
 			return h;
 		elseif i == 2 then
 			local h = sha512(t[0]);
-			t[1] = h;
+			t[2] = h;
 			return h;
 		end
 	end;