[gnutls-devel] gnutls-cli --dane
nmav at gnutls.org
Mon Apr 28 11:42:02 CEST 2014
On Fri, Apr 18, 2014 at 9:19 PM, James Cloos <cloos at jhcloos.com> wrote:
> DANE says that verification succeeds if any of the TLSA records match.
> That language was chosen expressly to permit secure rollovers.
There was a patch in
that should fix the issue you mention. It is now applied.
More information about the Gnutls-devel