reorder changed certificate warning

[zpackage] / src / fetchurl.c

diff --git a/src/fetchurl.c b/src/fetchurl.c
index ace6849be2dacdd7be03b73e1655a671319ac46f..dcab023450155a244c0a6d34db7ab2b2ef035a2a 100644 (file)
--- a/src/fetchurl.c
+++ b/src/fetchurl.c
@@ -206,6 +206,9 @@ int verify_first(struct TLSContext *context, struct TLSCertificate **chain, int
                }
 
                int match = (memcmp(certhash, fp, 64) == 0); 
+               if (!match) {
+                       fprintf(stderr, "host %s certificate changed\n", host);
+               }
 
                close(trustdb);
                tls_buffer_free(&tbuf);