Re: [openssl-dev] "SSL_dane_enable() may be called"

2016-01-16 Thread Viktor Dukhovni
> On Jan 16, 2016, at 2:32 PM, Claus Assmann wrote: > > - or very explicit: > SSL_dane_enable() must be called before the SSL handshake is initiated > with L if (and only if) you want to enable DANE for > that connection. I'm going with this one. Thanks. -- Viktor. ___

Re: [openssl-dev] "SSL_dane_enable() may be called"

2016-01-16 Thread Claus Assmann
On Sat, Jan 16, 2016, Viktor Dukhovni wrote: > On Sat, Jan 16, 2016 at 04:30:26AM -0800, Claus Assmann wrote: > > SSL_dane_enable() may be called before the SSL handshake is > > initiated with L to enable DANE for that connection. > > "may" seems to be a bit confusing here: if you want "to en

Re: [openssl-dev] "SSL_dane_enable() may be called"

2016-01-16 Thread Viktor Dukhovni
On Sat, Jan 16, 2016 at 04:30:26AM -0800, Claus Assmann wrote: > SSL_CTX_dane_enable.pod states: > > SSL_dane_enable() may be called before the SSL handshake is > initiated with L to enable DANE for that connection. > > "may" seems to be a bit confusing here: if you want "to enable DANE > fo

[openssl-dev] "SSL_dane_enable() may be called"

2016-01-16 Thread Claus Assmann
SSL_CTX_dane_enable.pod states: SSL_dane_enable() may be called before the SSL handshake is initiated with L to enable DANE for that connection. "may" seems to be a bit confusing here: if you want "to enable DANE for that connection" then you "must" call the function, right? _