From dd6cf7bc200b13da0532b39f22370ac7c9fa99c5 Mon Sep 17 00:00:00 2001 From: Fabian Keil Date: Wed, 26 Aug 2020 22:17:59 +0200 Subject: [PATCH] create_server_ssl_connection(): Improve the error message ... that is emitted when the certificate validation fails. Sponsored by: Robert Klemme --- openssl.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/openssl.c b/openssl.c index 0005ed5f..3cf65e5f 100644 --- a/openssl.c +++ b/openssl.c @@ -1093,8 +1093,9 @@ extern int create_server_ssl_connection(struct client_state *csp) else { csp->server_cert_verification_result = verify_result; - log_error(LOG_LEVEL_ERROR, "SSL_get_verify_result failed: %s", - X509_verify_cert_error_string(verify_result)); + log_error(LOG_LEVEL_ERROR, + "X509 certificate verification for %s failed: %s", + csp->http->hostport, X509_verify_cert_error_string(verify_result)); ret = -1; goto exit; } -- 2.39.2