mirror of
https://github.com/StackExchange/dnscontrol.git
synced 2025-01-06 07:32:08 +08:00
2f0f5330fc
* Added CAA support * Fixed bind parsing of CAA records * Added CAA parsing test * Renamed CAA json fields * Added CAA tag validation * Updated CAA docs to clarify on the value field * parse_tests: Fixed typo in caaflags * Added integration test * Small cleanups
13 lines
633 B
JavaScript
13 lines
633 B
JavaScript
D("foo.com","none",
|
|
// Allow letsencrypt to issue certificate for this domain
|
|
CAA("@","issue","letsencrypt.org"),
|
|
// Allow no CA to issue wildcard certificate for this domain
|
|
CAA("@","issuewild",";"),
|
|
// Report all violation to test@example.com. If CA does not support
|
|
// this record then refuse to issue any certificate
|
|
CAA("@", "iodef", "mailto:test@example.com", CAA_CRITICAL),
|
|
// Optionally report violation to http://example.com
|
|
CAA("@", "iodef", "http://example.com"),
|
|
// Report violation to https://example.com
|
|
CAA("@", "iodef", "https://example.com", CAA_CRITICAL)
|
|
);
|