Don't try DANE on raw IP

Stephen Paul Weber created 

It won't work anyway, and people get annoyed.

Change summary

src/main/java/eu/siacs/conversations/services/MemorizingTrustManager.java | 2 
1 file changed, 1 insertion(+), 1 deletion(-)

Detailed changes

src/main/java/eu/siacs/conversations/services/MemorizingTrustManager.java 🔗 

@@ -403,7 +403,7 @@ public class MemorizingTrustManager {
         try {
             LOGGER.log(Level.FINE, "checkCertTrusted: trying appTrustManager");
             if (isServer) {
-                if (verifiedHostname != null) {
+                if (verifiedHostname != null && !eu.siacs.conversations.utils.IP.matches(verifiedHostname)) {
                     try {
                         if (daneVerifier.verifyCertificateChain(chain, verifiedHostname, port)) {
                             if (daneCb != null) daneCb.accept(true);