devs/libstrophe-gh
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

OpenSSL: debug name string on cert verify fail

Browse Source
This commit is contained in:
James Booth
2015-09-11 01:18:48 +01:00
parent 3e12f33cce
commit 20380157ba
1 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
src/tls_openssl.c
View File

@@ -62,9 +62,17 @@ verify_callback(int preverify_ok, X509_STORE_CTX *x509_ctx)
int err = X509_STORE_CTX_get_error(x509_ctx); int err = X509_STORE_CTX_get_error(x509_ctx);
const char *errstr = X509_verify_cert_error_string(err); const char *errstr = X509_verify_cert_error_string(err);
X509 *cert X509_STORE_CTX_get_current_cert(x509_ctx); X509 *cert = X509_STORE_CTX_get_current_cert(x509_ctx);
// ASN1_INTEGER *serial_number = X509_get_serialNumber(cert);
X509_NAME *issuer = X509_get_issuer_name(cert);
// X509_NAME *subject = X509_get_subject_name(cert);
// EVP_PKEY *pubkey = X509_get_pubkey(cert);
char *nameline = X509_NAME_oneline(issuer, NULL, 0);
xmpp_debug(xmppctx, "TLS", "ERROR: %d: %s", err, errstr); xmpp_debug(xmppctx, "TLS", "ERROR: %d: %s", err, errstr);
xmpp_debug(xmppctx, "TLS", "ERROR ISSUER: %s", nameline);
return 1; return 1;
} }
} }