generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Show errors on CSR verification failure.

Browse Source 
If CSR verify fails in ca utility print out error messages.
Otherwise some errors give misleading output: for example
if the key size exceeds the library limit.

PR#2875
(cherry picked from commit a30bdb55d1)
This commit is contained in:
Dr. Stephen Henson
2014-06-29 13:31:57 +01:00
parent c0eae35b3d
commit 2e7124497d
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
apps/ca.c
View File

@@ -1599,12 +1599,14 @@ static int certify(X509 **xret, char *infile, EVP_PKEY *pkey, X509 *x509,
{ {
ok=0; ok=0;
BIO_printf(bio_err,"Signature verification problems....\n"); BIO_printf(bio_err,"Signature verification problems....\n");
ERR_print_errors(bio_err);
goto err; goto err;
} }
if (i == 0) if (i == 0)
{ {
ok=0; ok=0;
BIO_printf(bio_err,"Signature did not match the certificate request\n"); BIO_printf(bio_err,"Signature did not match the certificate request\n");
ERR_print_errors(bio_err);
goto err; goto err;
} }
else else