diff --git a/cli-miner.cpp b/cli-miner.cpp
index 3e68610..ac58ecf 100644
--- a/cli-miner.cpp
+++ b/cli-miner.cpp
@@ -47,6 +47,7 @@ int main(int argc, char *argv[])
 {
 	SSL_library_init();
 	SSL_load_error_strings();
+	OpenSSL_add_all_digests();
 
 	const char* sFilename = "config.txt";
 	bool benchmark_mode = false;
diff --git a/jpsock.cpp b/jpsock.cpp
index 8128764..6236adb 100644
--- a/jpsock.cpp
+++ b/jpsock.cpp
@@ -121,7 +121,7 @@ std::string&& jpsock::get_call_error()
 	return std::move(prv->oCallRsp.sCallErr);
 }
 
-inline bool jpsock::set_socket_error(const char* a)
+bool jpsock::set_socket_error(const char* a)
 {
 	if(!bHaveSocketError)
 	{
@@ -132,7 +132,7 @@ inline bool jpsock::set_socket_error(const char* a)
 	return false;
 }
 
-inline bool jpsock::set_socket_error(const char* a, const char* b)
+bool jpsock::set_socket_error(const char* a, const char* b)
 {
 	if(!bHaveSocketError)
 	{
diff --git a/socket.cpp b/socket.cpp
index 86069dd..5a978b3 100644
--- a/socket.cpp
+++ b/socket.cpp
@@ -5,6 +5,7 @@
 #include <openssl/ssl.h>
 #include <openssl/err.h>
 #include <openssl/opensslconf.h>
+
 #ifndef OPENSSL_THREADS
 #error OpenSSL was compiled without thread support
 #endif
@@ -168,13 +169,6 @@ void tls_socket::init_ctx()
 	if(ctx == nullptr)
 		return;
 
-	/* Cannot fail ??? */
-	//SSL_CTX_set_verify(ctx, SSL_VERIFY_PEER, verify_callback);
-
-	/* Cannot fail ??? */
-	//SSL_CTX_set_verify_depth(ctx, 4);
-
-	/* Cannot fail ??? */
 	SSL_CTX_set_options(ctx, SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3 | SSL_OP_NO_COMPRESSION);
 }
 
@@ -233,22 +227,34 @@ bool tls_socket::connect()
 
 	/* Step 1: verify a server certificate was presented during the negotiation */
 	X509* cert = SSL_get_peer_certificate(ssl);
-	if(cert) { X509_free(cert); } /* Free immediately */
-
 	if(cert == nullptr)
 	{
 		print_error();
 		return false;
 	}
 
-	/* Step 2: verify the result of chain verification */
-	/* Verification performed according to RFC 4158    */
-	//res = SSL_get_verify_result(ssl);
-	//if(!(X509_V_OK == res)) handleFailure();
+	const EVP_MD* digest;
+	unsigned char md[EVP_MAX_MD_SIZE];
+	unsigned int dlen;
 
-	/* Step 3: hostname verification */
-	/* An exercise left to the reader */
+	digest = EVP_get_digestbyname("sha256");
+	if(digest == nullptr)
+	{
+		print_error();
+		false;
+	}
 
+	if(X509_digest(cert, digest, md, &dlen) != 1)
+	{
+		print_error();
+		false;
+	}
+
+	for(size_t i=0; i < dlen; i++)
+		printf("%.2X:", md[i]);
+	printf("\n");
+
+	X509_free(cert);
 	return true;
 }