openssl: add details to "unable to set client certificate" error

from: "curl: (58) unable to set client certificate"

to: curl: (58) unable to set client certificate [error:0A00018F:SSL
routines::ee key too small]

Closes #9228

diff --git a/.mailmap b/.mailmap
index bfa0774c4b321b5ba218a0508524c859304c5ec7..e55d77efd33091dc014fc1f4361245ad3368cba5 100644 (file)
--- a/.mailmap
+++ b/.mailmap
@@ -93,3 +93,4 @@ Christian Schmitz <support@monkeybreadsoftware.de>
 Max Mehl <max.mehl@fsfe.org>
 rzrymiak on github <106121613+rzrymiak@users.noreply.github.com>
 Oliver Roberts <oliver@futaura.co.uk>
+opensignature on github <antonio@piumarossa.it>

diff --git a/lib/vtls/openssl.c b/lib/vtls/openssl.c
index 5a7a6124078d122c1dd063ce3d722b2a7f962dd3..c1be10516c276ad6dea3a620b14ffd248414fd55 100644 (file)
--- a/lib/vtls/openssl.c
+++ b/lib/vtls/openssl.c
@@ -868,8 +868,9 @@ int cert_stuff(struct Curl_easy *data,
           }
 
           if(SSL_CTX_use_certificate(ctx, params.cert) != 1) {
-            failf(data, "unable to set client certificate");
-            X509_free(params.cert);
+            failf(data, "unable to set client certificate [%s]",
+                  ossl_strerror(ERR_get_error(), error_buffer,
+                                sizeof(error_buffer)));
             return 0;
           }
           X509_free(params.cert); /* we don't need the handle any more... */