only fail DANE verification if status is non-zero

1 files changed, 1 insertions, 1 deletions

diff --git a/src/cli.c b/src/cli.c
index d1a43fc7ad..00309a8d72 100644
--- a/src/cli.c
+++ b/src/cli.c
@@ -488,7 +488,7 @@ static int cert_verify_callback(gnutls_session_t session)
 				gnutls_free(out.data);
 			}
 
-			if (!insecure && !ssh)
+			if (status != 0 && !insecure && !ssh)
 				return -1;
 		}