Oh yes... with ldns-dane insecure TLSAs are ok when -d is given

diff --git a/examples/ldns-dane.c b/examples/ldns-dane.c
index 6802482086f23aab69e970288ee016e576b791ec..3ae358813296973a67f7dc5628af396f5526fc77 100644 (file)
--- a/examples/ldns-dane.c
+++ b/examples/ldns-dane.c
@@ -600,8 +600,7 @@ dane_query(ldns_rr_list** rrs, ldns_resolver* r,
 
                if (! ldns_pkt_ad(p)) { /* Not secure */
 
-                       ldns_pkt_free(p);
-                       return LDNS_STATUS_DANE_INSECURE;
+                       goto insecure;
                }
                ldns_pkt_free(p);
                return LDNS_STATUS_OK;