[exim-dev] [Bug 2311] DANE verify fails with a TA-mode TLSA …

Top Page
This message is part of the following thread:
Mthe complete thread tree sorted by date
Madmin at <-
Madmin at ->
Delete this message
Reply to this message
Author: admin
Date:  
To: exim-dev
Old-Topics: [exim-dev] [Bug 2311] New: DANE verify fails with a TA-mode TLSA and a selfsigned sever cert
Subject: [exim-dev] [Bug 2311] DANE verify fails with a TA-mode TLSA and a selfsigned server cert
https://bugs.exim.org/show_bug.cgi?id=2311

--- Comment #2 from Andreas Metzler <eximusers@???> ---
Afaict src/tls-gnu.c verify_certificate() invokes
gnutls_certificate_verify_peers2() (which does verification against the trust
store) even if DANE was successfully checked and TLSA record is 2 or 3.

--
You are receiving this mail because:
You are on the CC list for the bug.
This message was posted to the following mailing lists:
Exim-dev
Mailing List Info | Nearby Messages		<-[exim-dev] [Bug 2312] Email From: <> refused delivery[exim-dev] [Bug 2311] DANE verify fails with a TA-mode TLSA and a selfsigned server cert->
Tahini and Hummus and Cumin Development Archives administrated by cumin AdminsLurker (version 2.3)