sanchayanmaity
/
dotfiles
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

dnscontrol: Add TLSA record 

For reference
https://community.letsencrypt.org/t/tlsa-record-changes-with-every-renewal-process-which-breaks-dane/144145
https://gist.github.com/buffrr/609285c952e9cb28f76da168ef8c2ca6
https://www.huque.com/bin/gen_tlsa

Verify with
https://www.huque.com/bin/danecheck
This commit is contained in:
Sanchayan Maity 2022-12-13 20:47:40 +05:30
parent 13eebe0101
commit 16226ecfde
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
dnscontrol/dnsconfig.js
View File

@ -38,7 +38,8 @@ D('sanchayanmaity.net', REG_NONE, DnsProvider(DNS_DESEC),
SRV('_carddav._tcp' , 0 , 0, 0 , '.'),
SRV('_carddavs._tcp' , 0 , 1, 443, 'carddav.fastmail.com.'),
SRV('_caldav._tcp' , 0 , 0, 0 , '.'),
SRV('_caldavs._tcp' , 0 , 1, 443, 'caldav.fastmail.com.')
SRV('_caldavs._tcp' , 0 , 1, 443, 'caldav.fastmail.com.'),
TLSA("_443._tcp" , 3 , 1, 1 , "421ea3303e6f4f72329ad70307179463ed70b38be518233b9d1075ea295866a8")
);
D('sanchayanmaity.com', REG_NONE, DnsProvider(DNS_DESEC),
@ -65,5 +66,6 @@ D('sanchayanmaity.com', REG_NONE, DnsProvider(DNS_DESEC),
SRV('_carddav._tcp' , 0 , 0, 0 , '.'),
SRV('_carddavs._tcp' , 0 , 1, 443, 'carddav.fastmail.com.'),
SRV('_caldav._tcp' , 0 , 0, 0 , '.'),
SRV('_caldavs._tcp' , 0 , 1, 443, 'caldav.fastmail.com.')
SRV('_caldavs._tcp' , 0 , 1, 443, 'caldav.fastmail.com.'),
TLSA("_443._tcp" , 3 , 1, 1 , "bc66287a474ef9b6bd41cf38da8d02a58d07b39ea851d117359c1cc9e70b6272")
);