only fail DANE verification if status is non-zero

1 files changed, 3 insertions, 0 deletions

diff --git a/src/cli.c b/src/cli.c
index 39752e4d6c..eb1dde0ada 100644
--- a/src/cli.c
+++ b/src/cli.c
@@ -532,6 +532,9 @@ cert_verify_callback (gnutls_session_t session)
           
           fprintf(stderr, "- DANE: %s\n", out.data);
           gnutls_free(out.data);
+
+          if (status != 0 && !insecure)
+            return -1;
         }
 
     }