From 67ff99912d038a62ca16556242d6e7b208fff35c Mon Sep 17 00:00:00 2001 From: Gokhan Sengun Date: Tue, 29 Feb 2000 16:49:47 +0200 Subject: [PATCH] curl needs to be more chatty regarding certificate verification failure during SSL handshake --- lib/ssluse.c | 8 ++++++++ 1 files changed, 8 insertions(+), 0 deletions(-) diff --git a/lib/ssluse.c b/lib/ssluse.c index 8652cbd..40fb4e8 100644 --- a/lib/ssluse.c +++ b/lib/ssluse.c @@ -1772,6 +1772,7 @@ ossl_connect_step2(struct connectdata *conn, int sockindex) { struct SessionHandle *data = conn->data; int err; + long lerr; struct ssl_connect_data *connssl = &conn->ssl[sockindex]; DEBUGASSERT(ssl_connect_2 == connssl->connecting_state @@ -1827,6 +1828,13 @@ ossl_connect_step2(struct connectdata *conn, int sockindex) cert_problem = "SSL certificate problem, verify that the CA cert is" " OK. Details:\n"; rc = CURLE_SSL_CACERT; + + lerr = SSL_get_verify_result(connssl->handle); + if(lerr != X509_V_OK) { + infof(data, "\t SSL certificate fail reason: %s (%ld)\n", + X509_verify_cert_error_string(lerr), lerr); + } + break; default: rc = CURLE_SSL_CONNECT_ERROR; -- 1.7.2.5