Bugzilla – Bug 676
ldns-dane only allows plain ssl not start tls
Last modified: 2016-10-18 12:57:32 CEST
ldns-dane verify mail.example.com 25
doesn't work because ldns-dane wants to issue the start tls command and doesn't support start tls initiated TLS connections. It would be nice if ldns-dane would have an option to issue start tls optionally.
This is a nice to have, but will not make the upcoming bugfix and trivial enhancements release. I'll keep it open.