From 863a5420e3ad5efcfc7a175eed0d1a0b641c83c0 Mon Sep 17 00:00:00 2001
From: lloyd <lloyd@randombit.net>
Date: Wed, 1 Feb 2012 17:55:03 +0000
Subject: Actually check CA signatures in Credentials_Manager. This area needs
 a lot more work before this can be deployed.

---
 src/tls/tls_client.cpp | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'src/tls/tls_client.cpp')

diff --git a/src/tls/tls_client.cpp b/src/tls/tls_client.cpp
index 2bcdf7457..8b5ea9347 100644
--- a/src/tls/tls_client.cpp
+++ b/src/tls/tls_client.cpp
@@ -266,8 +266,8 @@ void Client::process_handshake_msg(Handshake_Type type,
 
       try
          {
-         creds.verify_certificate_chain(peer_certs,
-                                        state->client_hello->sni_hostname());
+         const std::string hostname = state->client_hello->sni_hostname();
+         creds.verify_certificate_chain("tls-client", hostname, peer_certs);
          }
       catch(std::exception& e)
          {
-- 
cgit v1.2.3