dtls: match fingerprint of the leaf certifcate

szcom · Dec 11, 2023 · 159a2e1 · 159a2e1
1 parent 6c3e352
commit 159a2e1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/daemon/dtls.c b/daemon/dtls.c
@@ -504,7 +504,7 @@ static int verify_callback(int ok, X509_STORE_CTX *store) {
 
 	if (ps->dtls_cert)
 		X509_free(ps->dtls_cert);
-	ps->dtls_cert = X509_dup(X509_STORE_CTX_get_current_cert(store));
+	ps->dtls_cert = X509_dup(X509_STORE_CTX_get0_cert(store));
 
 	if (!media->fingerprint.hash_func || !media->fingerprint.digest_len)
 		return 1; /* delay verification */