pmg_verify_tls_policy: improve regex

diff --git a/PMG/Config.pm b/PMG/Config.pm
index 44b1545b7dbf765ddf4ee9ae0d4f9d929c0ba6a8..9e73b49baac62fdf408e8072012425511c6c8910 100755 (executable)
--- a/PMG/Config.pm
+++ b/PMG/Config.pm
@@ -953,7 +953,7 @@ sub pmg_verify_tls_policy {
     # TODO: extend to parse attributes of the policy
     my $valid_policy = qr/none|may|encrypt|dane|dane-only|fingerprint|verify|secure/;
 
-    if ($policy !~ /$valid_policy/) {
+    if ($policy !~ /^${valid_policy}$/) {
           return undef if $noerr;
           die "value '$policy' does not look like a valid tls policy\n";
     }