From 28646fa9c74b94722eadd7bc2d9c285245aded80 Mon Sep 17 00:00:00 2001 From: Jeremy Harris Date: Wed, 20 Dec 2017 21:14:06 +0000 Subject: DANE/GnuTLS: ignore traditional CA anchor validation in DANE-EE mode Not quite right for a mixed TA+EE set of TLSA records, but better than always-enforcing --- test/confs/5840 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'test/confs/5840') diff --git a/test/confs/5840 b/test/confs/5840 index 10ca2111b..754945d6e 100644 --- a/test/confs/5840 +++ b/test/confs/5840 @@ -69,7 +69,7 @@ begin transports send_to_server: driver = smtp allow_localhost - port = ${if match {$host}{\Ntest.ex$\N} {PORT_D}{25}} + port = PORT_D hosts_try_dane = * hosts_require_dane = HOSTIPV4 -- cgit v1.2.3