Changeset 640

Timestamp:

28/07/08 10:59:58 (4 months ago)

Author:

smoku

Message:

Added SSL error messages to debug output

Files:

• trunk/sx/ssl.c (modified) (5 diffs)

trunk/sx/ssl.c

@@ -739 +739 @@
         return 1;
 
-    /* !!! output openssl error messages to the debug log */
-
     /* create the context */
     ctx = SSL_CTX_new(SSLv23_method());
@@ -752 +750 @@
         ret = SSL_CTX_load_verify_locations (ctx, cachain, NULL);
         if(ret != 1) {
-            _sx_debug(ZONE, "WARNING: couldn't load CA chain: %s", cachain);
+            _sx_debug(ZONE, "WARNING: couldn't load CA chain: %s; %s", cachain, ERR_error_string(ret, NULL));
         }
     }
@@ -759 +757 @@
     ret = SSL_CTX_use_certificate_chain_file(ctx, pemfile);
     if(ret != 1) {
-        _sx_debug(ZONE, "couldn't load certificate from %s", pemfile);
+        _sx_debug(ZONE, "couldn't load certificate from %s; %s", pemfile, ERR_error_string(ret, NULL));
         SSL_CTX_free(ctx);
         return 1;
@@ -767 +765 @@
     ret = SSL_CTX_use_PrivateKey_file(ctx, pemfile, SSL_FILETYPE_PEM);
     if(ret != 1) {
-        _sx_debug(ZONE, "couldn't load private key from %s", pemfile);
+        _sx_debug(ZONE, "couldn't load private key from %s; %s", pemfile, ERR_error_string(ret, NULL));
         SSL_CTX_free(ctx);
         return 1;
@@ -775 +773 @@
     ret = SSL_CTX_check_private_key(ctx);
     if(ret != 1) {
-        _sx_debug(ZONE, "private key does not match certificate public key");
+        _sx_debug(ZONE, "private key does not match certificate public key; %s", ERR_error_string(ret, NULL));
         SSL_CTX_free(ctx);
         return 1;