Re: Using/validating DANE certs?

Hey all!

I've cleaned up the proof-of-concept a bit (same place as before [1]).

The general use-cases remain the same as I mentioned before:

     curl --dane --dns-servers ... [--trusted-upstream-dns] 
https://whatever.wherever

and on the libcurl side, `CURLOPT_ADD_DNS_RR` can be used to inject RRs 
into the cache; DANE can be enabled by `CURLOPT_DANE` and 
`CURLOPT_UPSTREAM_DNS_TRUSTED` can be used to ignore DNSSEC failures.


If the general outlook is positive, I can open a PR; otherwise I'm open 
to suggestions on how to make this better :^)

[1]: 
<https://github.com/alimpfard/curl/commit/179bef4b25dcd3c88e0a16197f94e0d41a72595d>

--
Cheers,
~ Ali Mohammad Pur

-- 
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html