Improved TOFU implementation

If a server sends a different certificate (checked by matching public key fingerprints), abort the connection at the TLS handshake stage.

A new error page is shown explaining the situation. A button is provided for conveniently opening Page Information, where trust can be updated.

The file format of "visited.txt" was updated, so it is now called "visited.2.txt". The new format includes server port numbers, and the fingerprints are calculated based on public keys.

IssueID #308
IssueID #309
IssueID #310

1 files changed, 1 insertions, 0 deletions

diff --git a/src/gmutil.h b/src/gmutil.h
index 40fa1cf9..1bf41775 100644
--- a/src/gmutil.h
+++ b/src/gmutil.h
@@ -43,6 +43,7 @@ enum iGmStatusCode {
     unknownStatusCode_GmStatusCode,
     invalidLocalResource_GmStatusCode,
     tlsFailure_GmStatusCode,
+    tlsServerCertificateNotVerified_GmStatusCode,
 
     none_GmStatusCode                      = 0,
     /* general status code categories */