# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1781298549 -7200
# Node ID 84a72e9cb6102e550bf3e24b7aef9535f45e8034
# Parent  f50685c55a1cc091aa2de6669a05e9dfa0ca858d
util.prosodyctl.check: Print expected TLSA records in consistent format

Same as util.dns now.
Question is if this is easy to copy-paste into DNS editors.

diff -r f50685c55a1c -r 84a72e9cb610 util/prosodyctl/check.lua
--- a/util/prosodyctl/check.lua	Fri Jun 12 23:08:25 2026 +0200
+++ b/util/prosodyctl/check.lua	Fri Jun 12 23:09:09 2026 +0200
@@ -1350,9 +1350,9 @@
 						end
 						if use_dane then
 							if cert.pubkey then
-								print("    DANE: TLSA 3 1 1 "..sha256(pem2der(cert:pubkey()), true))
+								print("    DANE: TLSA DANE-EE(3) SPKI(1) SHA2-256(1) "..sha256(pem2der(cert:pubkey()), true))
 							elseif cert.pem then
-								print("    DANE: TLSA 3 0 1 "..sha256(pem2der(cert:pem()), true))
+								print("    DANE: TLSA DANE-EE(3) Cert(0) SHA2-256(1) "..sha256(pem2der(cert:pem()), true))
 							end
 						end
 					end