Ouch!

diff --git a/dane.c b/dane.c
index f7f992ae0abb665371c8e471ec9b451dc0037ae3..eaa2e99ec496970df62d979e2cac0d49a2f6c60b 100644 (file)
--- a/dane.c
+++ b/dane.c
@@ -638,7 +638,7 @@ ldns_dane_verify_rr(const ldns_rr* tlsa_rr,
                                s = LDNS_STATUS_DANE_PKIX_DID_NOT_VALIDATE;
                        }
 
-               } else if (LDNS_STATUS_OK) { 
+               } else if (s == LDNS_STATUS_OK) { 
                        /* PKIX validated, does the TLSA match too? */
 
                        /* Pop the last cert from the validation chain */