Client...

I think it makes sense to use the s_client (apps/s_client.c ) as my testbed... Around line 1220 is where they start doing some interesting stuff.

Well, hard to see exactly where it would make sense to insert a DANE check but probably around that region.

Interestingly, the print_stuff(BIO *bio, SSL *s, int full) function has some useful code...