From a471a9f3b6e1fbb0b2a8c6e1c0106bcaaad8b53f Mon Sep 17 00:00:00 2001
From: Matthew Hall <matthew.hall@threatstream.com>
Date: Tue, 24 Mar 2015 17:36:32 -0700
Subject: vtls_openssl: improve PKCS#12 load failure error message

---
 lib/vtls/openssl.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'lib/vtls')

diff --git a/lib/vtls/openssl.c b/lib/vtls/openssl.c
index b4fd38c13..e07202693 100644
--- a/lib/vtls/openssl.c
+++ b/lib/vtls/openssl.c
@@ -514,7 +514,9 @@ int cert_stuff(struct connectdata *conn,
       PKCS12_free(p12);
 
       if(SSL_CTX_use_certificate(ctx, x509) != 1) {
-        failf(data, SSL_CLIENT_CERT_ERR);
+        failf(data,
+              "could not load PKCS12 client certificate, OpenSSL error %s",
+              ERR_error_string(ERR_get_error(), NULL) );
         goto fail;
       }
 
-- 
cgit v1.2.3