summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--NEWS.md1
-rw-r--r--src/catlfish.erl7
2 files changed, 5 insertions, 3 deletions
diff --git a/NEWS.md b/NEWS.md
index 84a5a6c..c4702c2 100644
--- a/NEWS.md
+++ b/NEWS.md
@@ -14,6 +14,7 @@
determine if an STH is fresh enough. Default if not configured is
86400, equals 24 hours (closes CATLFISH-51).
- New config group 'ratelimits' (closes CATLFISH-52).
+- Verification of leaf data when read from disk (closes CATLFISH-50).
## Bug fixes
diff --git a/src/catlfish.erl b/src/catlfish.erl
index 68e96ea..4bf1cdf 100644
--- a/src/catlfish.erl
+++ b/src/catlfish.erl
@@ -326,10 +326,11 @@ unpack_certchain(Data) ->
x_entries([]) ->
[];
x_entries([H|T]) ->
- {_Index, _Hash, Entry} = H,
- {Type, MTL, Cert, Chain} = unpack_entry(Entry),
+ {_Index, LeafHash, Entry} = H,
+ {Type, MTLText, Cert, Chain} = unpack_entry(Entry),
+ LeafHash = ht:leaf_hash(MTLText),
ExtraData = serialise_extra_data(Type, Cert, Chain),
- [{[{leaf_input, base64:encode(MTL)},
+ [{[{leaf_input, base64:encode(MTLText)},
{extra_data, base64:encode(ExtraData)}]} | x_entries(T)].
-spec encode_tls_vector(binary(), non_neg_integer()) -> binary().