caa

rfc6844-conform CAA record lookup and validation

Usage

npm i caa

import caa from 'caa';

await caa('subdomain.example.com');
// => [{flags: 0, tag: 'issue', value: 'letsencrypt.org', issuerCritical: false}]

await caa.matches('subdomain.example.com', 'letsencrypt.org');
// => true

API

caa(name, [options])

Retrieve the CAA records which apply to name. Returns a CAA object.

caa.matches(name, ca, [options])

Test if the CAA record for name matches for certificate authority ca.

options

• servers: The DNS servers to use. Defaults to the system resolvers or ['8.8.8.8', '8.8.4.4'] if none are configured.
• port: The port on the DNS server to use. Default 53.
• recursions: How many recursions to follow. Default 50.
• retries: How many retries to attempt. Default 12.
• ignoreTLDs: Don't query top level domains like com in example.com. Default: false.
• dnsSocket: A dns-socket instance, useful when doing a large amount of queries to re-use a single socket. Default: undefined.

License

© silverwind, distributed under BSD licence