From d9841333e40c16d12df8190527a0ceba233f4c93 Mon Sep 17 00:00:00 2001
From: Phil Pennock <pdp@exim.org>
Date: Fri, 24 Feb 2017 22:39:02 -0500
Subject: [PATCH] Pull in vdukhovni/ssl_dane 8270afba fix

Negating an int and comparing to another int was a bug which we got
lucky on.
---
 src/src/dane-openssl.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/src/dane-openssl.c b/src/src/dane-openssl.c
index bb927383f..97acccb5a 100644
--- a/src/src/dane-openssl.c
+++ b/src/src/dane-openssl.c
@@ -667,7 +667,7 @@ for (n = sk_X509_num(in); n > 0; --n, ++depth)
     {
     if (grow_chain(dane, UNTRUSTED, ca))
       {
-      if (!X509_check_issued(ca, ca) == X509_V_OK)
+      if (X509_check_issued(ca, ca) != X509_V_OK)
 	{
 	/* Restart with issuer as subject */
 	cert = ca;
-- 
2.30.2