{"repo":"shuque/dane","free":true,"listed":false,"github":"https://github.com/shuque/dane","clone":"git clone https://github.com/shuque/dane.git","description":"Go library for DANE authentication","language":"Go","stars":24,"topics":["dane","dnssec","authentication","tlsa","x509","dns","pkix"],"license":"MIT","category":"auth-billing-email","readme_excerpt":"dane Go library for DANE TLSA authentication Pre-requisites Go Go dns package from https://github.com/miekg/dns Documentation Formatted documentation for this module can be found at: https://pkg.go.dev/github.com/shuque/dane?tab=doc Description Package dane provides a set of functions to perform DANE authentication of a TLS server, with fall back to PKIX authentication if no DANE TLSA records exist for the server. DANE is a protocol that employs DNSSEC signed records (\"TLSA\") to authenticate X.509 certificates used in TLS and other protocols. See RFC 6698 for details. The dane.Config structure holds all the configured input parameters for DANE authentication, including the server's name, address & port, and the TLSA record set data. A new dane.Config structure has to be instantiated for each DANE TLS server that needs to be authenticated. The package includes functions that will perform secure lookup of TLSA records and address records via a validating DNS resolver: GetTLSA() and GetAddresses(). Alternatively, if the calling application has obtained the TLSA record data by itself, it can populate the dane.Config's TLSA structure itself. The use of GetTLSA() and GetAddresses() requires the use of a validating DNS resolver that sets the AD bit on authenticated responses. The GetResolver() function in this package, by default uses the set of resolvers defined in /etc/resolv.conf. This can be overridden by supplying a custom resolv.conf file, or by directly initializing a Resolve","default_branch":null,"files":null,"tree":[],"storefront":"/r/shuque","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/shuque/dane/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}