implement trust on first use

[zpackage] / crypto / tlse.c

diff --git a/crypto/tlse.c b/crypto/tlse.c
index 5f5f04790d083477c6a34b6ee2522d59549a778b..8920467058eb3c76f7c57e13c19a2afa8fee3e53 100644 (file)
--- a/crypto/tlse.c
+++ b/crypto/tlse.c
@@ -5162,6 +5162,12 @@ int _private_asn1_parse(struct TLSContext *context,
                pos += length;
        }
 
+       if (cert_len && cert_data) {
+               int h = find_hash("sha256");
+               size_t len = sizeof cert->fp;
+               hash_memory(h, cert_data,cert_len, cert->fp, &len);
+       }
+
        if (level == 2 && cert->sign_key && cert->sign_len
            && cert_len && cert_data) {
                free(cert->fingerprint);