[Open Crypto Project] #30: https://cryptech.is/ throws error with NIST DANE tested

[Open Crypto Project]

#30: https://cryptech.is/ throws error with NIST DANE tested
-----------------------+-----------------
  Reporter:  randy     |      Owner:  sra
      Type:  defect    |     Status:  new
  Priority:  minor     |  Milestone:
 Component:  sysadmin  |    Version:
Resolution:            |   Keywords:
Blocked By:            |   Blocking:
-----------------------+-----------------
Changes (by randy):

 * cc: sra at hactrn.net (added)


Comment:

 it's scott rose's tool, so i asked him to take a look at the ticket.
 fwiw, https://psg.com/ and https://archive.psg.com/ pass the tool.

 note that it had both
 {{{
 _443._tcp               TLSA    3 1 1
 542E161A92C896C88FF5EE6E8F763536ACCA3E52266D35897FDE56104BE6A526
 *._tcp                  CNAME   ca.hactrn.net.
 }}}
 which i admit to not underdstanding.  commented out the second and
 waiting for it to propagate before retesting.

--
Ticket URL: <https://trac.cryptech.is/ticket/30#comment:2>
Open Crypto Project <https://wiki.cryptech.is/>