From dc6ac6fe4ec6a3ac96c343a7c939a44022c9b677 Mon Sep 17 00:00:00 2001 From: Kim Alvefur Date: Thu, 2 Nov 2023 09:39:03 +0100 Subject: mod_s2s: Automagically enable DANE for s2sin if 'use_dane' is enabled Simplifies configuration, only one already existing boolean to flip. --- plugins/mod_s2s.lua | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'plugins') diff --git a/plugins/mod_s2s.lua b/plugins/mod_s2s.lua index 33659b59..e7c80ddb 100644 --- a/plugins/mod_s2s.lua +++ b/plugins/mod_s2s.lua @@ -95,6 +95,12 @@ local s2s_service_options = { }; local s2s_service_options_mt = { __index = s2s_service_options } +if module:get_option_boolean("use_dane", false) then + -- DANE is supported in net.connect but only for outgoing connections, + -- to authenticate incoming connections with DANE we need + module:depends("s2s_auth_dane_in"); +end + module:hook("stats-update", function () measure_connections_inbound:clear() measure_connections_outbound:clear() -- cgit v1.2.3