vtls_openssl: improve client certificate load failure error messages

This commit is contained in:
Matthew Hall 2015-03-24 17:34:13 -07:00 коммит произвёл Daniel Stenberg
Родитель 58b0a8b059
Коммит b3175a767d
1 изменённых файлов: 8 добавлений и 2 удалений

Просмотреть файл

@ -403,7 +403,10 @@ int cert_stuff(struct connectdata *conn,
/* SSL_CTX_use_certificate_chain_file() only works on PEM files */
if(SSL_CTX_use_certificate_chain_file(ctx,
cert_file) != 1) {
failf(data, SSL_CLIENT_CERT_ERR);
failf(data,
"could not load PEM client certificate, OpenSSL error %s, "
"(no key found, wrong pass phrase, or wrong file format?)",
ERR_error_string(ERR_get_error(), NULL) );
return 0;
}
break;
@ -415,7 +418,10 @@ int cert_stuff(struct connectdata *conn,
if(SSL_CTX_use_certificate_file(ctx,
cert_file,
file_type) != 1) {
failf(data, SSL_CLIENT_CERT_ERR);
failf(data,
"could not load ASN1 client certificate, OpenSSL error %s, "
"(no key found, wrong pass phrase, or wrong file format?)",
ERR_error_string(ERR_get_error(), NULL) );
return 0;
}
break;