From: William Lallemand <wlallemand@haproxy.org>
Date: Thu, 27 Oct 2022 12:41:07 +0000 (+0200)
Subject: MINOR: ssl: dump the SSL string error when SSL_CTX_use_PrivateKey() failed.
X-Git-Tag: v2.7-dev9~127
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=5de49512520dd60ac63a9c7e4c9de11368de3527;p=thirdparty%2Fhaproxy.git

MINOR: ssl: dump the SSL string error when SSL_CTX_use_PrivateKey() failed.

Display the OpenSSL reason error string when SSL_CTX_use_PrivateKey()
failed.
---

diff --git a/src/ssl_sock.c b/src/ssl_sock.c
index 4a16f6f0cc..6b38d4031b 100644
--- a/src/ssl_sock.c
+++ b/src/ssl_sock.c
@@ -3720,9 +3720,14 @@ static int ssl_sock_put_ckch_into_ctx(const char *path, const struct cert_key_an
 	int errcode = 0;
 	STACK_OF(X509) *find_chain = NULL;
 
+	ERR_clear_error();
+
 	if (SSL_CTX_use_PrivateKey(ctx, ckch->key) <= 0) {
-		memprintf(err, "%sunable to load SSL private key into SSL Context '%s'.\n",
-				err && *err ? *err : "", path);
+		int ret;
+
+		ret = ERR_get_error();
+		memprintf(err, "%sunable to load SSL private key into SSL Context '%s': %s.\n",
+				err && *err ? *err : "", path, ERR_reason_error_string(ret));
 		errcode |= ERR_ALERT | ERR_FATAL;
 		return errcode;
 	}