From: Willem Toorop <willem@NLnetLabs.nl>
Date: Fri, 19 Oct 2012 12:17:38 +0000 (+0000)
Subject: Oh yes... with ldns-dane insecure TLSAs are ok when -d is given
X-Git-Tag: release-1.6.17rc1~186
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b04c9b38240720bf657da064bdcd173a435fc12d;p=thirdparty%2Fldns.git

Oh yes... with ldns-dane insecure TLSAs are ok when -d is given
---

diff --git a/examples/ldns-dane.c b/examples/ldns-dane.c
index 68024820..3ae35881 100644
--- a/examples/ldns-dane.c
+++ b/examples/ldns-dane.c
@@ -600,8 +600,7 @@ dane_query(ldns_rr_list** rrs, ldns_resolver* r,
 
 		if (! ldns_pkt_ad(p)) { /* Not secure */
 
-			ldns_pkt_free(p);
-			return LDNS_STATUS_DANE_INSECURE;
+			goto insecure;
 		}
 		ldns_pkt_free(p);
 		return LDNS_STATUS_OK;