On 2017-07-25 at 22:10 -0400, Eric Tykwinski wrote: > Sorry, probably straying from the topic, but does anyone know any good SMTP > tests for DANE. > I’m using https://dane.sys4.de/ currently and it works, but I would like > something with some more details if possible.
Self-pimping: https://go.pennock.tech/smtpdane/ Golang tooling, stand-alone binary. I invoke from cron as part of monitoring, something along the lines of: smtpdane -nagios -expect-ocsp -mx spodhuis.org Nagios-compatible exit status and output enabled; error if OCSP missing; look up MX records for the arguments (domains, not hostnames) and check them all. See the README.md for more details. Requires Golang 1.8+ for hooking into the TLS APIs properly. % mkdir ~/go % go get go.pennock.tech/smtpdane (or see more mind-numbing detail in the aforementioned readme file). _______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop