Usage 1 is fine It asserts the exact cert same as 3, just also says PKIX should pass too.
1 files changed, 1 insertions(+), 1 deletions(-) M common/common.go
M common/common.go => common/common.go +1 -1
@@ 103,7 103,7 @@ func oneTarget(resolver *dane.Resolver, service string, selector string, target oneTlsa = *config.TLSA if daneok { for _, rdata := range oneTlsa.Rdata { - if rdata != nil && rdata.Usage == 3 { + if rdata != nil && (rdata.Usage == 3 || rdata.Usage == 1) { found = true } }