Log certificate's signature algorithm

diff --git a/tls.go b/tls.go
index 6f8ce8c5e22709b7bc707e6bf1d0da1be4b2855c..8a807d0a0f6e5954cbdc1bc7c3c7fcb38766512b 100644 (file)
--- a/tls.go
+++ b/tls.go
@@ -138,10 +138,11 @@ func dialTLS(ctx context.Context, network, addr string) (net.Conn, error) {
        connState := conn.ConnectionState()
        if !connState.DidResume {
                fifos.LogTLS <- fmt.Sprintf(
-                       "%s\t%s %s\t%s\t%s",
+                       "%s\t%s %s %s\t%s\t%s",
                        addr,
                        ucspi.TLSVersion(connState.Version),
                        tls.CipherSuiteName(connState.CipherSuite),
+                       connState.PeerCertificates[0].SignatureAlgorithm,
                        spkiHash(connState.PeerCertificates[0]),
                        connState.NegotiatedProtocol,
                )