Mercurial > prosody-hg

changeset 14228:84a72e9cb610

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
util.prosodyctl.check: Print expected TLSA records in consistent format Same as util.dns now. Question is if this is easy to copy-paste into DNS editors.
author Kim Alvefur <zash@zash.se>
date Fri, 12 Jun 2026 23:09:09 +0200
parents f50685c55a1c
children ce31fdde0ad1
files util/prosodyctl/check.lua
diffstat 1 files changed, 2 insertions(+), 2 deletions(-) [+]
line wrap: on
line diff
--- a/util/prosodyctl/check.lua	Fri Jun 12 23:08:25 2026 +0200
+++ b/util/prosodyctl/check.lua	Fri Jun 12 23:09:09 2026 +0200
@@ -1350,9 +1350,9 @@
 						end
 						if use_dane then
 							if cert.pubkey then
-								print("    DANE: TLSA 3 1 1 "..sha256(pem2der(cert:pubkey()), true))
+								print("    DANE: TLSA DANE-EE(3) SPKI(1) SHA2-256(1) "..sha256(pem2der(cert:pubkey()), true))
 							elseif cert.pem then
-								print("    DANE: TLSA 3 0 1 "..sha256(pem2der(cert:pem()), true))
+								print("    DANE: TLSA DANE-EE(3) Cert(0) SHA2-256(1) "..sha256(pem2der(cert:pem()), true))
 							end
 						end
 					end