moparisthebest/curl
1
0
Fork 0
mirror of https://github.com/moparisthebest/curl synced 2024-12-22 08:08:50 -05:00
Code Issues Releases Wiki Activity

vtls_openssl: improve client certificate load failure error messages

Browse Source
This commit is contained in:
Matthew Hall 2015-03-24 17:34:13 -07:00 committed by Daniel Stenberg
parent 58b0a8b059
commit b3175a767d
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
lib/vtls/openssl.c
View File

@ -403,7 +403,10 @@ int cert_stuff(struct connectdata *conn,
/* SSL_CTX_use_certificate_chain_file() only works on PEM files */ /* SSL_CTX_use_certificate_chain_file() only works on PEM files */
if(SSL_CTX_use_certificate_chain_file(ctx, if(SSL_CTX_use_certificate_chain_file(ctx,
cert_file) != 1) { cert_file) != 1) {
failf(data, SSL_CLIENT_CERT_ERR); failf(data,
"could not load PEM client certificate, OpenSSL error %s, "
"(no key found, wrong pass phrase, or wrong file format?)",
ERR_error_string(ERR_get_error(), NULL) );
return 0; return 0;
} }
break; break;
@ -415,7 +418,10 @@ int cert_stuff(struct connectdata *conn,
if(SSL_CTX_use_certificate_file(ctx, if(SSL_CTX_use_certificate_file(ctx,
cert_file, cert_file,
file_type) != 1) { file_type) != 1) {
failf(data, SSL_CLIENT_CERT_ERR); failf(data,
"could not load ASN1 client certificate, OpenSSL error %s, "
"(no key found, wrong pass phrase, or wrong file format?)",
ERR_error_string(ERR_get_error(), NULL) );
return 0; return 0;
} }
break; break;