diff options
Diffstat (limited to 'lib/vtls/darwinssl.c')
| -rw-r--r-- | lib/vtls/darwinssl.c | 24 | 
1 files changed, 12 insertions, 12 deletions
| diff --git a/lib/vtls/darwinssl.c b/lib/vtls/darwinssl.c index e8116b8a1..bae221a3d 100644 --- a/lib/vtls/darwinssl.c +++ b/lib/vtls/darwinssl.c @@ -950,7 +950,7 @@ static CURLcode CopyCertSubject(struct Curl_easy *data,    if(!c) {      failf(data, "SSL: invalid CA certificate subject"); -    return CURLE_SSL_CACERT; +    return CURLE_PEER_FAILED_VERIFICATION;    }    /* If the subject is already available as UTF-8 encoded (ie 'direct') then @@ -970,7 +970,7 @@ static CURLcode CopyCertSubject(struct Curl_easy *data,        if(!CFStringGetCString(c, cbuf, cbuf_size,                               kCFStringEncodingUTF8)) {          failf(data, "SSL: invalid CA certificate subject"); -        result = CURLE_SSL_CACERT; +        result = CURLE_PEER_FAILED_VERIFICATION;        }        else          /* pass back the buffer */ @@ -1649,7 +1649,7 @@ static CURLcode darwinssl_connect_step1(struct connectdata *conn,          }          CFRelease(cert); -        if(result == CURLE_SSL_CACERT) +        if(result == CURLE_PEER_FAILED_VERIFICATION)            return CURLE_SSL_CERTPROBLEM;          if(result)            return result; @@ -2429,37 +2429,37 @@ darwinssl_connect_step2(struct connectdata *conn, int sockindex)        /* These are all certificate problems with the server: */        case errSSLXCertChainInvalid:          failf(data, "SSL certificate problem: Invalid certificate chain"); -        return CURLE_SSL_CACERT; +        return CURLE_PEER_FAILED_VERIFICATION;        case errSSLUnknownRootCert:          failf(data, "SSL certificate problem: Untrusted root certificate"); -        return CURLE_SSL_CACERT; +        return CURLE_PEER_FAILED_VERIFICATION;        case errSSLNoRootCert:          failf(data, "SSL certificate problem: No root certificate"); -        return CURLE_SSL_CACERT; +        return CURLE_PEER_FAILED_VERIFICATION;        case errSSLCertNotYetValid:          failf(data, "SSL certificate problem: The certificate chain had a "                      "certificate that is not yet valid"); -        return CURLE_SSL_CACERT; +        return CURLE_PEER_FAILED_VERIFICATION;        case errSSLCertExpired:        case errSSLPeerCertExpired:          failf(data, "SSL certificate problem: Certificate chain had an "                "expired certificate"); -        return CURLE_SSL_CACERT; +        return CURLE_PEER_FAILED_VERIFICATION;        case errSSLBadCert:        case errSSLPeerBadCert:          failf(data, "SSL certificate problem: Couldn't understand the server "                "certificate format"); -        return CURLE_SSL_CACERT; +        return CURLE_PEER_FAILED_VERIFICATION;        case errSSLPeerUnsupportedCert:          failf(data, "SSL certificate problem: An unsupported certificate "                      "format was encountered"); -        return CURLE_SSL_CACERT; +        return CURLE_PEER_FAILED_VERIFICATION;        case errSSLPeerCertRevoked:          failf(data, "SSL certificate problem: The certificate was revoked"); -        return CURLE_SSL_CACERT; +        return CURLE_PEER_FAILED_VERIFICATION;        case errSSLPeerCertUnknown:          failf(data, "SSL certificate problem: The certificate is unknown"); -        return CURLE_SSL_CACERT; +        return CURLE_PEER_FAILED_VERIFICATION;        /* These are all certificate problems with the client: */        case errSecAuthFailed: | 
