http://hg.omfa.de/prosody-modules/ en-us prosody-modules: mod_s2s_auth_dane/mod_s2s_auth_dane.lua history mod_s2s_auth_dane/mod_s2s_auth_dane.lua revision history mod_s2s_auth_dane: Fix traceback in DANE-TA check because unpack() moved http://hg.omfa.de/prosody-modules/log/35381608d323/mod_s2s_auth_dane/mod_s2s_auth_dane.lua
It moved into the table package in Lua 5.2, error happens when compat is
disabled or gone (ie 5.3+).

This happened in DANE-TA, which is disabled by default.]]> Kim Alvefur <zash@zash.se> Wed, 03 Mar 2021 11:51:39 +0100 mod_s2s_auth_dane: Disable now redundant validation done in trunk http://hg.omfa.de/prosody-modules/log/cf2bdb2aaa57/mod_s2s_auth_dane/mod_s2s_auth_dane.lua
Outgoing connections can now be validated natively in trunk since
a38f9e09ca31 so we only need to check incoming connections.]]> Kim Alvefur <zash@zash.se> Wed, 03 Mar 2021 11:43:38 +0100 mod_s2s_auth_dane: Fix typo in comment [codespell] http://hg.omfa.de/prosody-modules/log/77498ea07795/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Sun, 04 Feb 2018 15:55:07 +0100 mod_s2s_auth_dane: Use util.async if available (current prosody trunk) http://hg.omfa.de/prosody-modules/log/90a444ccaa8e/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Wed, 01 Jun 2016 22:33:51 +0200 mod_s2s_auth_dane: Move pausing code to a function http://hg.omfa.de/prosody-modules/log/2cbd7876ba14/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Sat, 28 May 2016 16:55:43 +0200 Backed out changeset f00cbfb812cd, it only half-worked and broke things http://hg.omfa.de/prosody-modules/log/7155ed1fb540/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Sat, 28 May 2016 13:34:43 +0200 mod_s2s_auth_dane: Remove unused local http://hg.omfa.de/prosody-modules/log/5df3b646c9ad/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Thu, 26 May 2016 15:36:19 +0200 mod_s2s_auth_dane: Attempt a new approach to async lookups that doesn't depend on connection pausing http://hg.omfa.de/prosody-modules/log/f00cbfb812cd/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Thu, 26 May 2016 15:35:52 +0200 mod_s2s_auth_dane: Make sure dane field has correct type http://hg.omfa.de/prosody-modules/log/5e0102a07fdc/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Thu, 26 May 2016 15:31:32 +0200 mod_s2s_auth_dane: Correct message about not being able to support SPKI http://hg.omfa.de/prosody-modules/log/39774b078dde/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Sun, 31 Jan 2016 12:38:51 +0100 mod_s2s_auth_dane: Check if cert:pubkey() is available http://hg.omfa.de/prosody-modules/log/6645838c6475/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Sat, 23 Jan 2016 20:34:26 +0100 mod_s2s_auth_dane: Warn only if there enabled uses that can't be supported http://hg.omfa.de/prosody-modules/log/8ccf347c7753/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Mon, 11 Jan 2016 15:45:09 +0100 mod_s2s_auth_dane: More DNS related debug logging http://hg.omfa.de/prosody-modules/log/b10118d7c0df/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Sat, 12 Dec 2015 17:00:25 +0100 mod_s2s_auth_dane: Abort on bogus reply to SRV lookup http://hg.omfa.de/prosody-modules/log/54405541d0ba/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Sat, 12 Dec 2015 16:59:49 +0100 mod_s2s_auth_dane: Log as much as possible through session logger instance http://hg.omfa.de/prosody-modules/log/5ea6f4e6fa8c/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Sat, 12 Dec 2015 16:01:58 +0100 mod_s2s_auth_dane: Add a telnet console command that exposes DANE information http://hg.omfa.de/prosody-modules/log/98d757dc0771/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Thu, 10 Dec 2015 23:24:55 +0100 mod_s2s_auth_dane: Keep DANE response around after the connection is established to aid in debugging http://hg.omfa.de/prosody-modules/log/2f32196586bb/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Thu, 10 Dec 2015 23:24:11 +0100 mod_s2s_auth_dane: Some more verbose debug logging http://hg.omfa.de/prosody-modules/log/6979ee1db9f8/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Thu, 10 Dec 2015 23:23:07 +0100 mod_s2s_auth_dane: Consider TLSA records with PKIX uses as supported (if enabled) even if the chain is invalid (if no match is found the session is considered insecure) http://hg.omfa.de/prosody-modules/log/7974a24d29b6/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Mon, 16 Nov 2015 18:03:41 +0100 mod_s2s_auth_dane: Consider the current certificate chain status before checking PKIX-{EE,CA} TLSA records http://hg.omfa.de/prosody-modules/log/1950fa6aa0c0/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Thu, 05 Nov 2015 15:38:31 +0100 mod_s2s_auth_dane: Support servers without SRV records by falling back to port 5269 and the bare hostname for TLSA lookups http://hg.omfa.de/prosody-modules/log/7e04ca0aa757/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Thu, 05 Nov 2015 14:10:11 +0100 mod_s2s_auth_dane: Ignore mutating of the 'module' global, that is ok in prosody plugins [luacheck] http://hg.omfa.de/prosody-modules/log/7ba877e2d660/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Thu, 21 May 2015 11:14:16 +0200 mod_s2s_auth_dane: Validate names of DANE-TA certs http://hg.omfa.de/prosody-modules/log/d011b87b7f58/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Thu, 21 May 2015 10:28:02 +0200 mod_s2s_auth_dane: Simplify cases where there are only one SRV record http://hg.omfa.de/prosody-modules/log/9b429fc9e8a0/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Wed, 06 May 2015 00:53:27 +0200 mod_s2s_auth_dane: Don't count number of RRs in DNS reply if the DNS lib already did http://hg.omfa.de/prosody-modules/log/ab3175685f94/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Wed, 06 May 2015 00:51:46 +0200 mod_s2s_auth_dane: Abort earlier for sessions from hosts that don't say who they are http://hg.omfa.de/prosody-modules/log/7f4c64cfed09/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Mon, 13 Apr 2015 13:36:38 +0200 mod_s2s_auth_dane: Demote log message about failure to ASCII-ify hostname from error to warning http://hg.omfa.de/prosody-modules/log/aac5e56615ce/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Mon, 13 Apr 2015 13:35:37 +0200 mod_s2s_auth_dane: Cleanup [luacheck] http://hg.omfa.de/prosody-modules/log/9a3d2f1479a4/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Tue, 07 Apr 2015 17:35:20 +0200 mod_s2s_auth_dane: Update for recent changes in Zashs LuaSec branch http://hg.omfa.de/prosody-modules/log/a4a6b4be973a/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Tue, 31 Mar 2015 20:57:34 +0200 mod_s2s_auth_dane: Comments and cleanup http://hg.omfa.de/prosody-modules/log/aed20f9e78c8/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Mon, 16 Mar 2015 16:19:53 +0100 mod_s2s_auth_dane: Include hostname when logging a failure http://hg.omfa.de/prosody-modules/log/6ea13869753f/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Tue, 16 Sep 2014 19:55:54 +0200 mod_s2s_auth_dane: Fix stringprepping when doing "DANE Light" http://hg.omfa.de/prosody-modules/log/a40f9b8661d8/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Tue, 16 Sep 2014 19:53:41 +0200 mod_s2s_auth_dane: Fix traceback caused by LuaSec not being loaded http://hg.omfa.de/prosody-modules/log/72ef98818b90/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Sun, 14 Sep 2014 18:52:54 +0200 mod_s2s_auth_dane: Tweak log messages http://hg.omfa.de/prosody-modules/log/161bbe0b9dd3/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Sun, 15 Jun 2014 02:40:18 +0200 mod_s2s_auth_dane: Add some more info to log messages http://hg.omfa.de/prosody-modules/log/3944e364ba88/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Fri, 13 Jun 2014 02:19:52 +0200 mod_s2s_auth_dane: Pause connection only if needed http://hg.omfa.de/prosody-modules/log/cdc8f226a284/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Thu, 12 Jun 2014 12:31:50 +0200 mod_s2s_auth_dane: Return if no certificate found http://hg.omfa.de/prosody-modules/log/1caf971a2f0f/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Thu, 12 Jun 2014 12:30:39 +0200 mod_s2s_auth_dane: Cache logger to save some table lookups and improve readability http://hg.omfa.de/prosody-modules/log/33a796b2cb91/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Wed, 11 Jun 2014 12:50:57 +0200 mod_s2s_auth_dane: Fix potential traceback in logging if SRV target fails nameprep http://hg.omfa.de/prosody-modules/log/8791fa8a18c8/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Mon, 19 May 2014 17:00:12 +0200 mod_s2s_auth_dane: Unreference DNS lookup when reply arrives (thanks LordVan) http://hg.omfa.de/prosody-modules/log/48141957f719/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Mon, 19 May 2014 16:28:43 +0200 Backout 33f132c3f4b7 until 0.10 http://hg.omfa.de/prosody-modules/log/d85695be0441/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Thu, 15 May 2014 11:12:31 +0200 mod_s2s_auth_dane: Fix traceback if session.srv_hosts is nil http://hg.omfa.de/prosody-modules/log/8626abe100e2/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Thu, 08 May 2014 15:43:58 +0200 mod_s2s_auth_dane: Change how TLSA support is detected http://hg.omfa.de/prosody-modules/log/f4e497a53c6e/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Wed, 07 May 2014 17:08:47 +0200 mod_s2s_auth_dane: Fix logic precedence issue http://hg.omfa.de/prosody-modules/log/151aa00559d1/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Wed, 07 May 2014 17:07:10 +0200 mod_s2s_auth_dane: Add support for DANE-TA and PKIX-CA (requires LuaSec changes) http://hg.omfa.de/prosody-modules/log/cf4e39334ef7/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Sun, 27 Apr 2014 01:43:43 +0200 mod_s2s_auth_dane: Use PEM to DER function from util.x509 (0.10+) http://hg.omfa.de/prosody-modules/log/33f132c3f4b7/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Sun, 27 Apr 2014 01:40:20 +0200 mod_s2s_auth_dane: Launch DANE queries when sending or receiving stream-features instead of monkeypatching s2sout.lib http://hg.omfa.de/prosody-modules/log/50f986deb3f7/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Sun, 27 Apr 2014 01:24:03 +0200 mod_s2s_auth_dane: Clean up no longer needed DNS replies http://hg.omfa.de/prosody-modules/log/d99c10fc4d19/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Thu, 24 Apr 2014 18:34:10 +0200 mod_s2s_auth_dane: Skip dns queries for already authenticated s2sin connections http://hg.omfa.de/prosody-modules/log/b183e78aee91/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Thu, 24 Apr 2014 18:33:13 +0200 mod_s2s_auth_dane: Remove non-working bogus handling http://hg.omfa.de/prosody-modules/log/1fcd280c226b/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Thu, 24 Apr 2014 18:32:25 +0200 mod_s2s_auth_dane: Break out DANE check into a function http://hg.omfa.de/prosody-modules/log/6bd9681d54b7/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Thu, 24 Apr 2014 18:19:09 +0200 mod_s2s_auth_dane: Improve debug message and log it on the session http://hg.omfa.de/prosody-modules/log/465e5d79551b/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Thu, 10 Apr 2014 22:40:11 +0200 mod_s2s_auth_dane: Merge functionality from mod_s2s_auth_dnssec_srv http://hg.omfa.de/prosody-modules/log/e3fe6c749bc3/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Mon, 24 Mar 2014 13:04:24 +0100 mod_s2s_auth_dane: Fix typo in debug statement http://hg.omfa.de/prosody-modules/log/5724008bbdb1/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Thu, 20 Mar 2014 15:55:37 +0100 mod_s2s_auth_dane: Pause s2sin while doing SRV and TLSA lookups, fixes race condition (Can haz util.async plz) http://hg.omfa.de/prosody-modules/log/103d685e2153/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Thu, 20 Mar 2014 15:31:15 +0100 mod_s2s_auth_dane: Fix tb when no hostname sent by remote http://hg.omfa.de/prosody-modules/log/920ac9a8480b/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Wed, 19 Mar 2014 19:48:06 +0100 mod_s2s_auth_dane: Verify that the SRV is secure http://hg.omfa.de/prosody-modules/log/74769c0c79f8/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Wed, 19 Mar 2014 14:33:10 +0100 mod_s2s_auth_dane: Abort module loading if luaunbound is unavailable http://hg.omfa.de/prosody-modules/log/497e1df4b7ee/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Wed, 19 Mar 2014 14:04:09 +0100 mod_s2s_auth_dane: Drop support for domains without SRV for now http://hg.omfa.de/prosody-modules/log/a74ba847195a/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Tue, 18 Mar 2014 16:09:51 +0100 mod_s2s_auth_dane: Fix for a17c2c4043e5 http://hg.omfa.de/prosody-modules/log/7f68d950bdd6/mod_s2s_auth_dane/mod_s2s_auth_dane.lua Kim Alvefur <zash@zash.se> Tue, 18 Mar 2014 16:02:24 +0100