reorder changed certificate warning

[zpackage] / src / fetchurl.c

diff --git a/src/fetchurl.c b/src/fetchurl.c
index e09a43755d4aa03eb947e06577b19297753dce99..dcab023450155a244c0a6d34db7ab2b2ef035a2a 100644 (file)
--- a/src/fetchurl.c
+++ b/src/fetchurl.c
@@ -206,12 +206,12 @@ int verify_first(struct TLSContext *context, struct TLSCertificate **chain, int
                }
 
                int match = (memcmp(certhash, fp, 64) == 0); 
-
-               close(trustdb);
-               tls_buffer_free(&tbuf);
                if (!match) {
                        fprintf(stderr, "host %s certificate changed\n", host);
                }
+
+               close(trustdb);
+               tls_buffer_free(&tbuf);
                return match ? no_error : bad_certificate;
        } while (!tbuf.error);