@@ -1,10 +1,10 @@
 /*
  * Copyright (C) 1997-2000 Sensus Consulting Ltd.
  * Matt Newman <matt@sensus.org>
  *
- * $Header: /home/rkeene/tmp/cvs2fossil/../tcltls/tls/tls/tlsX509.c,v 1.2 2000/01/20 01:53:14 aborr Exp $
+ * $Header: /home/rkeene/tmp/cvs2fossil/../tcltls/tls/tls/tlsX509.c,v 1.3 2003/07/07 20:24:49 hobbs Exp $
  */
 #include "tlsInt.h"
 
 /*
  * ASN1_UTCTIME_tostr --
@@ -74,18 +74,35 @@
     int serial;
     char subject[BUFSIZ];
     char issuer[BUFSIZ];
     char notBefore[BUFSIZ];
     char notAfter[BUFSIZ];
+#ifndef NO_SSL_SHA
+    int shai;
+    char sha_hash[SHA_DIGEST_LENGTH*2];
+    const char *shachars="0123456789ABCDEF";
+#endif
 
     serial = ASN1_INTEGER_get(X509_get_serialNumber(cert));
     X509_NAME_oneline(X509_get_subject_name(cert),subject,sizeof(subject));
     X509_NAME_oneline(X509_get_issuer_name(cert),issuer,sizeof(issuer));
 
     strcpy( notBefore, ASN1_UTCTIME_tostr( X509_get_notBefore(cert) ));
     strcpy( notAfter, ASN1_UTCTIME_tostr( X509_get_notAfter(cert) ));
 
+#ifndef NO_SSL_SHA
+    for (shai=0;shai<SHA_DIGEST_LENGTH;shai++)
+    {
+        sha_hash[shai * 2]=shachars[(cert->sha1_hash[shai] & 0xF0) >> 4];
+        sha_hash[shai * 2 + 1]=shachars[(cert->sha1_hash[shai] & 0x0F)];
+    }
+    Tcl_ListObjAppendElement( interp, certPtr,
+	    Tcl_NewStringObj( "sha1_hash", -1) );
+    Tcl_ListObjAppendElement( interp, certPtr,
+	    Tcl_NewStringObj( sha_hash, SHA_DIGEST_LENGTH*2) );
+
+#endif
     Tcl_ListObjAppendElement( interp, certPtr,
 	    Tcl_NewStringObj( "subject", -1) );
     Tcl_ListObjAppendElement( interp, certPtr,
 	    Tcl_NewStringObj( subject, -1) );