rustls: Add fixme regarding keys_match

yedayak · Jan 11, 2025 · f627468 · f627468
1 parent cf819a4
commit f627468
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/lib/vtls/rustls.c b/lib/vtls/rustls.c
@@ -776,6 +776,9 @@ cr_init_backend(struct Curl_cfilter *cf, struct Curl_easy *data,
       rustls_client_config_builder_free(config_builder);
       return CURLE_SSL_CERTPROBLEM;
     }
+    /* FIXME: This doesn't verify that the key matches the certificate.
+     * That requires calling rustls_certified_key_keys_match, which should
+     * be exposed in rustls-0.15 */
     result = rustls_certified_key_build(Curl_dyn_uptr(&cert_contents),
                                       Curl_dyn_len(&cert_contents),
                                       Curl_dyn_uptr(&key_contents),