add more information for host cert change

[zpackage] / src / fetchurl.c

diff --git a/src/fetchurl.c b/src/fetchurl.c
index e09a43755d4aa03eb947e06577b19297753dce99..1ef4abd2c1f70901b01ca1ff020e4ce9d20e7278 100644 (file)
--- a/src/fetchurl.c
+++ b/src/fetchurl.c
@@ -206,12 +206,14 @@ int verify_first(struct TLSContext *context, struct TLSCertificate **chain, int
                }
 
                int match = (memcmp(certhash, fp, 64) == 0); 
-
-               close(trustdb);
-               tls_buffer_free(&tbuf);
                if (!match) {
                        fprintf(stderr, "host %s certificate changed\n", host);
+                       fprintf(stderr, "was %.64s\n", fp);
+                       fprintf(stderr, "now %.64s\n", certhash);
                }
+
+               close(trustdb);
+               tls_buffer_free(&tbuf);
                return match ? no_error : bad_certificate;
        } while (!tbuf.error);