From 400a6080abfdbd3d96dc6a9a70ec2aa056b0fbb0 Mon Sep 17 00:00:00 2001
From: Bram Matthys <syzop@vulnscan.org>
Date: Wed, 10 Sep 2025 16:29:30 +0200
Subject: [PATCH] Actually make it possible for
 set::best-practices::trusted-cert-valid-hostname to be turned off (it was
 seen as an unknown option). Reported by PeGaSuS.

---
 src/conf.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/conf.c b/src/conf.c
index 80e0c64b5..2b4a1e49f 100644
--- a/src/conf.c
+++ b/src/conf.c
@@ -9787,6 +9787,10 @@ int	_test_set(ConfigFile *conf, ConfigEntry *ce)
 				{
 					bestpractices.trusted_cert = config_checkval(cepp->value, CFG_YESNO);
 				} else
+				if (!strcmp(cepp->name, "trusted-cert-valid-hostname"))
+				{
+					bestpractices.trusted_cert_valid_hostname = config_checkval(cepp->value, CFG_YESNO);
+				} else
 				if (!strcmp(cepp->name, "listen-nontls-port"))
 				{
 					bestpractices.listen_nontls_port = config_checkval(cepp->value, CFG_YESNO);