Roman KivalinandClaude Opus 4.6 b2b470dd69 Implement TLSA record verification in dane-check ...

dane-check now queries the authoritative DNS server for published TLSA
records and compares them against expected values computed from the
current certificate. Queries are TSIG-signed using the same key as the
DNS client config (for view selection support). Reports OK, MISSING,
or MISMATCH for each name and exits with code 1 if any check fails.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-14 15:12:15 +02:00

..

source

Add packaging, CI, and license

2026-04-12 20:47:00 +02:00

changelog

Implement TLSA record verification in dane-check

2026-04-14 15:12:15 +02:00

conffiles

Add packaging, CI, and license

2026-04-12 20:47:00 +02:00

control

Add packaging, CI, and license

2026-04-12 20:47:00 +02:00

copyright

Add packaging, CI, and license

2026-04-12 20:47:00 +02:00

rules

Add packaging, CI, and license

2026-04-12 20:47:00 +02:00