From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Fri, 18 Apr 2014 23:21:45 +0000 (+0200)
Subject: gnutls-cli will no longer allow the session to proceed if DANE verification fails.
X-Git-Tag: gnutls_3_3_1~5
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=13a4dbb6e98fd6c336d12e35095d603a894d49aa;p=thirdparty%2Fgnutls.git

gnutls-cli will no longer allow the session to proceed if DANE verification fails.
---

diff --git a/src/cli.c b/src/cli.c
index f3dc435101..d1a43fc7ad 100644
--- a/src/cli.c
+++ b/src/cli.c
@@ -483,12 +483,13 @@ static int cert_verify_callback(gnutls_session_t session)
 			if (rc < 0) {
 				fprintf(stderr, "*** DANE error: %s\n",
 					dane_strerror(rc));
-				if (!insecure && !ssh)
-					return -1;
+			} else {
+				fprintf(stderr, "- DANE: %s\n", out.data);
+				gnutls_free(out.data);
 			}
 
-			fprintf(stderr, "- DANE: %s\n", out.data);
-			gnutls_free(out.data);
+			if (!insecure && !ssh)
+				return -1;
 		}
 
 	}