-
Using current master, commit 072d390 (doc - Add WHAT IS DANE? section), and just wanting to check the TLSA records of a domain, it’s aborting due to missing `certbot`.
$ ./danectl check molgen.…
-
After performing static analysis using golangci-lint, there are some code to improve.
Fixing these will make letsdane a better library.
``` shell
golangci-lint run ./...
proxy/conn.go:48:10: Err…
-
I would like to check SRV records, but in my domain scheme SRV records have different names than MX records.
And the SRV records have no TSLA records. It would be nice to be able to disable TSLA chec…
-
Some rdata for TLSA records, specifically cert values, are allowed that I believe should be rejected per https://datatracker.ietf.org/doc/html/rfc6698#section-2.1.
* Missing cert.
* Non-hex char "D6…
-
Hi @MollyMcEvilley ,
#994 was resolved, but the most recent sys_Time.csv has dates in 2012 year again.
```
~/git/dnscontrol/integrationTest$ go test -v -verbose -provider TRANSIP
=== RUN TestDNSProviders
=== RU…
-
$ git log --oneline --no-decorate -1
1632cba CI: adjust for GHActions deprecations [tread-water]
$ go build
$ ./smtpdane mx3.molgen.mpg.de
error securely resolving "mx3.molgen.…
-
Hello,
Would it be possible to add a script generator of tlsa so that we can easily change every three months our zone dns in bind? Like that, those who use dnssec / dane everything is good.
b…
-
It would be great if there was a cleanup option which removes all dane records from cloudflare before the new one is set.
If you use this as lets encrypt hook it generates a new dane record for eve…
-
If you want to explicitly trust an intermediate certificate for certificate chain verification, you have to specify X509_V_FLAG_PARTIAL_CHAIN otherwise the leaf certificate is not verified. In practic…