print warning if host cert changed

diff --git a/src/fetchurl.c b/src/fetchurl.c
index ace6849be2dacdd7be03b73e1655a671319ac46f..e09a43755d4aa03eb947e06577b19297753dce99 100644 (file)
--- a/src/fetchurl.c
+++ b/src/fetchurl.c
@@ -209,6 +209,9 @@ int verify_first(struct TLSContext *context, struct TLSCertificate **chain, int
 
                close(trustdb);
                tls_buffer_free(&tbuf);
+               if (!match) {
+                       fprintf(stderr, "host %s certificate changed\n", host);
+               }
                return match ? no_error : bad_certificate;
        } while (!tbuf.error);