filip/Stalwart
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

DANE success on EndEntity match regardless of TrustAnchor validation

Browse Source
This commit is contained in:
mdecimus
2024-06-27 11:50:27 +02:00
parent 2818e73671
commit 5e7bd3f6be
1 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
crates/smtp/src/outbound/dane/verify.rs
View File

@@ -123,8 +123,13 @@ impl TlsaVerify for Tlsa {
}
}
if (self.has_end_entities == matched_end_entity)
&& (self.has_intermediates == matched_intermediate)
// DANE is valid if:
// - EE matched even if no TA matched
// - Both EE and TA matched
// - EE is not present and TA matched
if (self.has_end_entities && matched_end_entity)
|| ((self.has_end_entities == matched_end_entity)
&& (self.has_intermediates == matched_intermediate))
{
tracing::info!(
parent: span,