openssl: show which critical X.509 extension is not supported

diff --git a/src/libstrongswan/plugins/openssl/openssl_x509.c b/src/libstrongswan/plugins/openssl/openssl_x509.c
index c98e8055d060f8e23a812e24f07840a499899cbc..f15f511e7a217a7900c3bbd6b6c6177ac4e7b420 100644 (file)
--- a/src/libstrongswan/plugins/openssl/openssl_x509.c
+++ b/src/libstrongswan/plugins/openssl/openssl_x509.c
@@ -977,7 +977,12 @@ static bool parse_extensions(private_openssl_x509_t *this)
                                                                "libstrongswan.x509.enforce_critical", TRUE);
                                        if (!ok)
                                        {
-                                               DBG1(DBG_LIB, "found unsupported critical X.509 extension");
+                                               char buf[80] = "";
+
+                                               OBJ_obj2txt(buf, sizeof(buf),
+                                                                       X509_EXTENSION_get_object(ext), 0);
+                                               DBG1(DBG_LIB, "found unsupported critical X.509 "
+                                                        "extension: %s", buf);
                                        }
                                        break;
                        }