Add missing functions to allow access to newer X509_STORE_CTX status

information. Add more informative message to verify callback to indicate
when CRL path validation is taking place.
This commit is contained in:
Dr. Stephen Henson
2009-10-31 19:21:47 +00:00
parent 961092281f
commit 4a7f7171f5
3 changed files with 21 additions and 1 deletions

View File

@@ -310,7 +310,9 @@ static int MS_CALLBACK cb(int ok, X509_STORE_CTX *ctx)
0, XN_FLAG_ONELINE);
printf("\n");
}
printf("error %d at %d depth lookup:%s\n",cert_error,
printf("%serror %d at %d depth lookup:%s\n",
X509_STORE_CTX_get0_parent_ctx(ctx) ? "[CRL path]" : "",
cert_error,
X509_STORE_CTX_get_error_depth(ctx),
X509_verify_cert_error_string(cert_error));
switch(cert_error)