diff options
| -rw-r--r-- | NEWS.md | 1 | ||||
| -rw-r--r-- | src/catlfish.erl | 7 |
2 files changed, 5 insertions, 3 deletions
@@ -14,6 +14,7 @@ determine if an STH is fresh enough. Default if not configured is 86400, equals 24 hours (closes CATLFISH-51). - New config group 'ratelimits' (closes CATLFISH-52). +- Verification of leaf data when read from disk (closes CATLFISH-50). ## Bug fixes diff --git a/src/catlfish.erl b/src/catlfish.erl index 68e96ea..4bf1cdf 100644 --- a/src/catlfish.erl +++ b/src/catlfish.erl @@ -326,10 +326,11 @@ unpack_certchain(Data) -> x_entries([]) -> []; x_entries([H|T]) -> - {_Index, _Hash, Entry} = H, - {Type, MTL, Cert, Chain} = unpack_entry(Entry), + {_Index, LeafHash, Entry} = H, + {Type, MTLText, Cert, Chain} = unpack_entry(Entry), + LeafHash = ht:leaf_hash(MTLText), ExtraData = serialise_extra_data(Type, Cert, Chain), - [{[{leaf_input, base64:encode(MTL)}, + [{[{leaf_input, base64:encode(MTLText)}, {extra_data, base64:encode(ExtraData)}]} | x_entries(T)]. -spec encode_tls_vector(binary(), non_neg_integer()) -> binary(). |