net.resolvers.basic: Don't enable DANE with zero TLSA records
authorKim Alvefur <zash@zash.se>
Wed, 03 Mar 2021 18:42:54 +0100
changeset 11424 f768db80aee0
parent 11423 2c26dfc1977f
child 11425 926d53af9a7a
net.resolvers.basic: Don't enable DANE with zero TLSA records Turns out it doesn't work with zero.
net/resolvers/basic.lua
--- a/net/resolvers/basic.lua	Wed Mar 03 13:34:00 2021 +0100
+++ b/net/resolvers/basic.lua	Wed Mar 03 18:42:54 2021 +0100
@@ -37,7 +37,7 @@
 		if n > 0 then return; end
 		self.targets = targets;
 		if self.extra and self.extra.use_dane then
-			if secure then
+			if secure and tlsa[1] then
 				self.extra.tlsa = tlsa;
 				self.extra.dane_hostname = self.hostname;
 			else