mod_s2s_auth_dane_in
The Prosody network stack natively supports and handles DANE for outgoing s2s connections when DNSSEC is enabled.
This module complements this by implementing DANCE (DANE for Clients) in order to authenticate incoming s2s connections.
Configuration
To enable DANE in both
directions, set use_dane = true in the global section of
the Prosody config file:
-- global section
use_dane = trueThis enables both the DANE support in outgoing connections (built
into net.connect) as well as this module.