Merge pull request #632 from cuihaoleo/fix-dane-wrong-query

Fix wrong DNS query type in DANE lookups for IPv6-only hosts
foxcpp · Oct 12, 2023 · 5724788 · 5724788
2 parents d9920f0 + 5d8f09e
commit 5724788
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/framework/dns/dnssec.go b/framework/dns/dnssec.go
@@ -229,7 +229,7 @@ func (e ExtResolver) CheckCNAMEAD(ctx context.Context, host string) (ad bool, rn
 	if rname == "" {
 		// IPv6-only host? Try to find out rname using AAAA lookup.
 		msg := new(dns.Msg)
-		msg.SetQuestion(dns.Fqdn(host), dns.TypeA)
+		msg.SetQuestion(dns.Fqdn(host), dns.TypeAAAA)
 		msg.SetEdns0(4096, false)
 		msg.AuthenticatedData = true
 		resp, err := e.exchange(ctx, msg)