From: Martin Willi <martin@revosec.ch>
Date: Tue, 30 Apr 2013 09:46:11 +0000 (+0200)
Subject: openssl: show which critical X.509 extension is not supported
X-Git-Tag: 5.1.0rc1~25^2~36
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=3f55f203ee89e04511dc37b6a8ee7fe889b74c04;p=thirdparty%2Fstrongswan.git

openssl: show which critical X.509 extension is not supported
---

diff --git a/src/libstrongswan/plugins/openssl/openssl_x509.c b/src/libstrongswan/plugins/openssl/openssl_x509.c
index c98e8055d0..f15f511e7a 100644
--- a/src/libstrongswan/plugins/openssl/openssl_x509.c
+++ b/src/libstrongswan/plugins/openssl/openssl_x509.c
@@ -977,7 +977,12 @@ static bool parse_extensions(private_openssl_x509_t *this)
 								"libstrongswan.x509.enforce_critical", TRUE);
 					if (!ok)
 					{
-						DBG1(DBG_LIB, "found unsupported critical X.509 extension");
+						char buf[80] = "";
+
+						OBJ_obj2txt(buf, sizeof(buf),
+									X509_EXTENSION_get_object(ext), 0);
+						DBG1(DBG_LIB, "found unsupported critical X.509 "
+							 "extension: %s", buf);
 					}
 					break;
 			}