Accept a certificate using DANE if there is at least one entry that matches the certi...
authorNikos Mavrogiannopoulos <nmav@redhat.com>
Mon, 28 Apr 2014 09:10:07 +0000 (11:10 +0200)
committerNikos Mavrogiannopoulos <nmav@redhat.com>
Mon, 28 Apr 2014 09:15:47 +0000 (11:15 +0200)
commit9fce428f14810e601960adbc9ba07e89bbe7c0d2
treed4c3a5474f130e9c775c59521452d24b07a235a6
parent61e6080aee027b20b31a03b37343615809036144
Accept a certificate using DANE if there is at least one entry that matches the certificate.

This corrects the previous behavior that was rejecting the certificate if there
were multiple entries and one couldn't be validated. New flag DANE_VERIFY_UNKNOWN_DANE_INFO
is synonymous to DANE_VERIFY_NO_DANE_INFO. Patch by simon@arlott.org.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
libdane/dane.c
libdane/includes/gnutls/dane.h