From: Willem Toorop <willem@NLnetLabs.nl>
Date: Wed, 19 Sep 2012 14:59:49 +0000 (+0000)
Subject: Ouch!
X-Git-Tag: release-1.6.14rc1~19
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=06b9fb08394c11f360ab2992289e4fee3a80440e;p=thirdparty%2Fldns.git

Ouch!
---

diff --git a/dane.c b/dane.c
index f7f992ae..eaa2e99e 100644
--- a/dane.c
+++ b/dane.c
@@ -638,7 +638,7 @@ ldns_dane_verify_rr(const ldns_rr* tlsa_rr,
 				s = LDNS_STATUS_DANE_PKIX_DID_NOT_VALIDATE;
 			}
 
-		} else if (LDNS_STATUS_OK) { 
+		} else if (s == LDNS_STATUS_OK) { 
 			/* PKIX validated, does the TLSA match too? */
 
 			/* Pop the last cert from the validation chain */