prosody-modules: mod_s2s_auth_dane/mod_s2s_auth

mod_s2s_auth_dane: Keep DANE response around after the connection is established to aid in debugging

comparison

equal deleted inserted replaced

-:6979ee1db9f8
+:2f32196586bb
 					..((session.direction == "outgoing" and "offered") or "used")
 			});
 			return false;
 		end
 		-- Cleanup
-		session.dane = nil;
 		session.srv_hosts = nil;
 	end);
 end
 -- Compare one TLSA record against a certificate
 						session.cert_identity_status = "valid";
 						if use == 3 then -- DANE-EE, chain status equals DNSSEC chain status
 							session.cert_chain_status = "valid";
 						end
 						match_found = true;
+						dane.matching = tlsa;
 						break;
 					end
 				-- DANE-TA or PKIX-CA
 				elseif use == 2 or use == 0 then
 					supported_found = true;
 									session.cert_chain_status = "valid";
 									-- else -- TODO Check against SRV target?
 								end
 							end
 							match_found = true;
+							dane.matching = tlsa;
 							break;
 						end
 					end
 					if match_found then break end
 				end

Mercurial > prosody-modules