Use SHA-256 to check certificate fingerprint

lib/figo.js

@@ -20,11 +20,16 @@
 // THE SOFTWARE.
 //
 
+// Built-in modules.
 var https       = require("https");
 var tls         = require("tls");
 var querystring = require("querystring");
+var crypto      = require("crypto");
+
+// External dependencies.
 var clone       = require("clone");
 
+// Internal modules.
 var models    = require("./models");
 var FigoError = require("./errors").FigoError;
 
@@ -36,8 +41,7 @@ var Config = {
   api_endpoint: "api.figo.me",
 
   // figo Connect TLS certificate fingerprints.
-  valid_fingerprints: [ "38:AE:4A:32:6F:16:EA:15:81:33:8B:B0:D8:E4:A6:35:E7:27:F1:07",
-                        "DB:E2:E9:15:8F:C9:90:30:84:FE:36:CA:A6:11:38:D8:5A:20:5D:93" ],
+  valid_fingerprints: [ "070f14aeb94afb3df800e82b69a8515ceed2f5b1ba897bef6432458f61cf9e33" ],
 };
 
 var RETRIABLE_ERRORS = [
@@ -181,8 +185,12 @@ var HttpsAgent = function() {
     var stream = tls.connect(options);
 
     stream.on("secureConnect", function() {
-      var certificate = stream.getPeerCertificate();
-      if (!certificate || !certificate.fingerprint || Config.valid_fingerprints.indexOf(certificate.fingerprint) === -1) {
+      //var hash = crypto.createHash('sha256');
+      var fingerprint = crypto
+        .createHash('sha256')
+        .update(stream.getPeerCertificate().raw)
+        .digest('hex');
+      if (!~Config.valid_fingerprints.indexOf(fingerprint)) {
         agent.figo_request.figo_ssl_error = true;
         agent.figo_request.abort();
       }