From 257999ac7a08789cc421983493e43ecf5e169bab Mon Sep 17 00:00:00 2001
From: defanor <defanor@uberspace.net>
Date: Thu, 12 Nov 2020 14:23:30 +0300
Subject: Check server certificates using DANE (TLSA)

Currently it is just experimental and does not affect the
verification (except for adding a delay); perhaps the verification
should be made configurable, including an option to rely on DANE.
---
 configure.ac | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'configure.ac')

diff --git a/configure.ac b/configure.ac
index 942c7a3..589fd4e 100644
--- a/configure.ac
+++ b/configure.ac
@@ -24,6 +24,10 @@ PKG_CHECK_MODULES([GNUTLS], [gnutls])
 AC_SUBST(GNUTLS_CFLAGS)
 AC_SUBST(GNUTLS_LIBS)
 
+PKG_CHECK_MODULES([LIBDANE], [gnutls-dane])
+AC_SUBST([LIBDANE_CFLAGS])
+AC_SUBST([LIBDANE_LIBS])
+
 PKG_CHECK_MODULES([GSASL], [libgsasl])
 AC_SUBST(GSASL_CFLAGS)
 AC_SUBST(GSASL_LIBS)
-- 
cgit v1.2.3