moparisthebest/curl
1
0
Fork 0
mirror of https://github.com/moparisthebest/curl synced 2024-11-15 22:15:13 -05:00
Code Issues Releases Wiki Activity

Restored the SSL error codes since they was broken in the 7.10.4 release,

Browse Source 
also now attempt to detect and return the specific CACERT error code.
This commit is contained in:
Daniel Stenberg 2003-04-14 12:53:29 +00:00
parent 0aa8b82871
commit 21873b52e9
1 changed files with 23 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
lib/ssluse.c
View File

@ -900,9 +900,24 @@ Curl_SSLConnect(struct connectdata *conn)
/* untreated error */ /* untreated error */
char error_buffer[120]; /* OpenSSL documents that this must be at least char error_buffer[120]; /* OpenSSL documents that this must be at least
120 bytes long. */ 120 bytes long. */
detail = ERR_get_error(); /* Gets the earliest error code from the
thread's error queue and removes the
entry. */
if(0x14090086 == detail) {
/* 14090086:
SSL routines:
SSL3_GET_SERVER_CERTIFICATE:
certificate verify failed */
failf(data,
"SSL certificate problem, verify that the CA cert is OK");
return CURLE_SSL_CACERT;
}
else {
/* detail is already set to the SSL error above */ /* detail is already set to the SSL error above */
failf(data, "SSL: %s", ERR_error_string(detail, error_buffer)); failf(data, "SSL: %s", ERR_error_string(detail, error_buffer));
/* OpenSSL 0.9.6 and later has a function named /* OpenSSL 0.9.6 and later has a function named
ERRO_error_string_n() that takes the size of the buffer as a third ERRO_error_string_n() that takes the size of the buffer as a third
argument, and we should possibly switch to using that one in the argument, and we should possibly switch to using that one in the
@ -910,6 +925,7 @@ Curl_SSLConnect(struct connectdata *conn)
return CURLE_SSL_CONNECT_ERROR; return CURLE_SSL_CONNECT_ERROR;
} }
} }
}
else else
/* we have been connected fine, get out of the connect loop */ /* we have been connected fine, get out of the connect loop */
break; break;