gnutls-cli will no longer allow the session to proceed if DANE verification fails.

1 files changed, 5 insertions, 4 deletions

diff --git a/src/cli.c b/src/cli.c
index f3dc435101..d1a43fc7ad 100644
--- a/src/cli.c
+++ b/src/cli.c
@@ -483,12 +483,13 @@ static int cert_verify_callback(gnutls_session_t session)
 			if (rc < 0) {
 				fprintf(stderr, "*** DANE error: %s\n",
 					dane_strerror(rc));
-				if (!insecure && !ssh)
-					return -1;
+			} else {
+				fprintf(stderr, "- DANE: %s\n", out.data);
+				gnutls_free(out.data);
 			}
 
-			fprintf(stderr, "- DANE: %s\n", out.data);
-			gnutls_free(out.data);
+			if (!insecure && !ssh)
+				return -1;
 		}
 
 	}