diff options
author | Dr. Stephen Henson <steve@openssl.org> | 2014-06-29 13:31:57 +0100 |
---|---|---|
committer | Dr. Stephen Henson <steve@openssl.org> | 2014-06-29 13:33:44 +0100 |
commit | a30bdb55d1361b9926eef8127debfc2e1bb8c484 (patch) | |
tree | 52f7391f7034ccde9804745077c8f5b5029c4386 | |
parent | 7ae6a4b659facfd7ad8131238aa1d349cb3fc951 (diff) |
Show errors on CSR verification failure.
If CSR verify fails in ca utility print out error messages.
Otherwise some errors give misleading output: for example
if the key size exceeds the library limit.
PR#2875
-rw-r--r-- | apps/ca.c | 2 |
1 files changed, 2 insertions, 0 deletions
@@ -1628,12 +1628,14 @@ static int certify(X509 **xret, char *infile, EVP_PKEY *pkey, X509 *x509, { ok=0; BIO_printf(bio_err,"Signature verification problems....\n"); + ERR_print_errors(bio_err); goto err; } if (i == 0) { ok=0; BIO_printf(bio_err,"Signature did not match the certificate request\n"); + ERR_print_errors(bio_err); goto err; } else |