mirror/FairEmail
1
0
Fork 0
mirror of https://github.com/M66B/FairEmail.git synced 2025-01-02 13:14:39 +00:00
Code Issues Releases Wiki Activity

MiniDNS: removed TLSA record name check

Browse source
This commit is contained in:
M66B 2024-06-20 08:03:50 +02:00
parent 9f9edc69cb
commit 9be02a22c3
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
app/src/main/java/org/minidns/dane/DaneVerifier.java
View file

@ -120,7 +120,8 @@ public class DaneVerifier {
List<DaneCertificateException.CertificateMismatch> certificateMismatchExceptions = new LinkedList<>();
boolean verified = false;
for (Record<? extends Data> record : res.answerSection) {
if (record.type == Record.TYPE.TLSA && record.name.equals(req)) {
// https://github.com/MiniDNS/minidns/issues/140
if (record.type == Record.TYPE.TLSA /*&& record.name.equals(req)*/) {
TLSA tlsa = (TLSA) record.payloadData;
try {
verified |= checkCertificateMatches(chain[0], tlsa, hostName);