Skip to content

silverwind/caa

Repository files navigation

caa

rfc6844-conform CAA record lookup and validation

Usage

import {caa, caaMatches} from "caa";

await caa("example.com");
// => [{flags: 0, tag: 'issue', value: 'letsencrypt.org', issuerCritical: false}]

await caaMatches("example.com", "letsencrypt.org");
// => true

API

caa(name, [options])

Retrieve the CAA records which apply to name. Returns a CAA object.

caaMatches(name, ca, [options])

Test if the CAA record for name matches for certificate authority ca.

options

  • servers: The DNS servers to use. Defaults to the system resolvers or ['8.8.8.8', '8.8.4.4'] if none are configured.
  • port: The port on the DNS server to use. Default 53.
  • recursions: How many recursions to follow. Default 50.
  • retries: How many retries to attempt. Default 12.
  • ignoreTLDs: Don't query top level domains like com in example.com. Default: false.
  • dnsSocket: A dns-socket instance, useful when doing a large amount of queries to re-use a single socket. Default: undefined.

License

© silverwind, distributed under BSD licence