From: Simon Ruderich Date: Wed, 23 Mar 2011 22:34:52 +0000 (+0100) Subject: src/verify.c: Print server certificate in case of an error. X-Git-Tag: 0.2~1 X-Git-Url: https://ruderich.org/simon/gitweb/?a=commitdiff_plain;h=206479fb368638a916ac1c736df3835a1f0c35a5;p=tlsproxy%2Ftlsproxy.git src/verify.c: Print server certificate in case of an error. --- diff --git a/src/verify.c b/src/verify.c index 14c7127..8328432 100644 --- a/src/verify.c +++ b/src/verify.c @@ -111,6 +111,7 @@ int verify_tls_connection(gnutls_session_t session, const char *hostname) { /* Open stored server certificate file. */ if (0 != server_certificate_path(&file, hostname, path, sizeof(path))) { + LOG(LOG_DEBUG, "server certificate:\n%s", server_cert); return -1; } @@ -123,6 +124,8 @@ int verify_tls_connection(gnutls_session_t session, const char *hostname) { if (sizeof(stored_cert) <= size) { LOG(LOG_WARNING, "verify_tls_connection(): '%s' too big", path); fclose(file); + + LOG(LOG_DEBUG, "server certificate:\n%s", server_cert); return -1; } @@ -133,6 +136,8 @@ int verify_tls_connection(gnutls_session_t session, const char *hostname) { LOG(LOG_WARNING, "verify_tls_connection(): failed to read from '%s': %s", path, strerror(errno)); + + LOG(LOG_DEBUG, "server certificate:\n%s", server_cert); return -1; } fclose(file); @@ -142,6 +147,8 @@ int verify_tls_connection(gnutls_session_t session, const char *hostname) { LOG(LOG_ERROR, "verify_tls_connection(): server certificate changed!", path, strerror(errno)); + + LOG(LOG_WARNING, "server certificate:\n%s", server_cert); return -2; }