# DANE/OpenSSL
SERVER=
+CONTROL= *
.include DIR/aux-var/tls_conf_prefix
allow_localhost
port = PORT_D
- hosts_try_dane = *
+ hosts_try_dane = CONTROL
hosts_require_dane = HOSTIPV4
tls_verify_cert_hostnames = ${if eq {OPT}{no_certname} {}{*}}
tls_try_verify_hosts = thishost.test.ex