X-Git-Url: https://pd.if.org/git/?a=blobdiff_plain;f=src%2Ffetchurl.c;h=dcab023450155a244c0a6d34db7ab2b2ef035a2a;hb=3284a51466487a9d353062424d5bf6165218f665;hp=e09a43755d4aa03eb947e06577b19297753dce99;hpb=a068919e82f0565035293903b85d58c21d008679;p=zpackage

diff --git a/src/fetchurl.c b/src/fetchurl.c
index e09a437..dcab023 100644
--- a/src/fetchurl.c
+++ b/src/fetchurl.c
@@ -206,12 +206,12 @@ int verify_first(struct TLSContext *context, struct TLSCertificate **chain, int
 		}
 
 		int match = (memcmp(certhash, fp, 64) == 0); 
-
-		close(trustdb);
-		tls_buffer_free(&tbuf);
 		if (!match) {
 			fprintf(stderr, "host %s certificate changed\n", host);
 		}
+
+		close(trustdb);
+		tls_buffer_free(&tbuf);
 		return match ? no_error : bad_certificate;
 	} while (!tbuf.error);