X-Git-Url: https://jfr.im/git/irc/rqf/shadowircd.git/blobdiff_plain/436cf01700f2b2e11397fe0695d73d29073da196..a099270d452af92c5640d5d6712aa0987adb7c44:/src/sslproc.c

diff --git a/src/sslproc.c b/src/sslproc.c
index 573482a..b02a045 100644
--- a/src/sslproc.c
+++ b/src/sslproc.c
@@ -402,6 +402,29 @@ ssl_process_dead_fd(ssl_ctl_t * ctl, ssl_ctl_buf_t * ctl_buf)
 	exit_client(client_p, client_p, &me, reason);
 }
 
+static void
+ssl_process_certfp(ssl_ctl_t * ctl, ssl_ctl_buf_t * ctl_buf)
+{
+	struct Client *client_p;
+	int32_t fd;
+	uint8_t *certfp;
+	char certfp_string[RB_SSL_CERTFP_LEN * 2 + 1];
+	int i;
+
+	if(ctl_buf->buflen != 5 + RB_SSL_CERTFP_LEN)
+		return;		/* bogus message..drop it.. XXX should warn here */
+
+	fd = buf_to_int32(&ctl_buf->buf[1]);
+	certfp = (uint8_t *)&ctl_buf->buf[5];
+	client_p = find_cli_fd_hash(fd);
+	if(client_p == NULL)
+		return;
+	for(i = 0; i < RB_SSL_CERTFP_LEN; i++)
+		rb_snprintf(certfp_string + 2 * i, 3, "%02x",
+				certfp[i]);
+	sendto_one_notice(client_p, ":*** CertFP is %s", certfp_string);
+}
+
 static void
 ssl_process_cmd_recv(ssl_ctl_t * ctl)
 {
@@ -422,6 +445,9 @@ ssl_process_cmd_recv(ssl_ctl_t * ctl)
 		case 'D':
 			ssl_process_dead_fd(ctl, ctl_buf);
 			break;
+		case 'F':
+			ssl_process_certfp(ctl, ctl_buf);
+			break;
 		case 'S':
 			ssl_process_zipstats(ctl, ctl_buf);
 			break;