Actually check CA signatures in Credentials_Manager. This area needs a

lot more work before this can be deployed.

1 files changed, 2 insertions, 2 deletions

diff --git a/src/tls/tls_client.cpp b/src/tls/tls_client.cpp
index 2bcdf7457..8b5ea9347 100644
--- a/src/tls/tls_client.cpp
+++ b/src/tls/tls_client.cpp
@@ -266,8 +266,8 @@ void Client::process_handshake_msg(Handshake_Type type,
 
       try
          {
-         creds.verify_certificate_chain(peer_certs,
-                                        state->client_hello->sni_hostname());
+         const std::string hostname = state->client_hello->sni_hostname();
+         creds.verify_certificate_chain("tls-client", hostname, peer_certs);
          }
       catch(std::exception& e)
          {