caa

rfc8659-conform CAA record lookup and validation

Usage

pnpm add caa

import {caa, caaMatches} from "caa";

await caa("example.com");
// => [{flags: 0, tag: 'issue', value: 'letsencrypt.org', issuerCritical: false}]

await caaMatches("example.com", "letsencrypt.org");
// => true

API

caa(name, [options])

Retrieve the CAA records which apply to name. Returns an array of CAA objects.

caaMatches(name, ca, [options])

Test if the CAA record for name matches for certificate authority ca.

options

• servers: The DNS servers to use. Defaults to the system resolvers or ['8.8.8.8', '8.8.4.4'] if none are configured.
• port: The port on the DNS server to use. Default 53.
• recursions: How many recursions to follow. Default 50.
• retries: How many failed queries the whole lookup may make, shared across all names it queries. Each failure retries on the next server, and once exhausted the lookup resolves to no records. Default 12.
• ignoreTLDs: Don't query top level domains like com in example.com. Default: false.
• dnsSocket: A dns-socket instance, useful when doing a large amount of queries to re-use a single socket. Default: undefined.

© silverwind, distributed under BSD licence