MiniDNS: removed TLSA record name check

pull/215/head
M66B 6 months ago
parent 9f9edc69cb
commit 9be02a22c3

@ -120,7 +120,8 @@ public class DaneVerifier {
List<DaneCertificateException.CertificateMismatch> certificateMismatchExceptions = new LinkedList<>();
boolean verified = false;
for (Record<? extends Data> record : res.answerSection) {
if (record.type == Record.TYPE.TLSA && record.name.equals(req)) {
// https://github.com/MiniDNS/minidns/issues/140
if (record.type == Record.TYPE.TLSA /*&& record.name.equals(req)*/) {
TLSA tlsa = (TLSA) record.payloadData;
try {
verified |= checkCertificateMatches(chain[0], tlsa, hostName);

Loading…
Cancel
Save