]> git.ipfire.org Git - thirdparty/hostap.git/commitdiff
OpenSSL: Make debug log clearer on TLS initialization failure
authorJouni Malinen <j@w1.fi>
Sat, 1 Mar 2025 18:15:08 +0000 (20:15 +0200)
committerJouni Malinen <j@w1.fi>
Sat, 1 Mar 2025 18:15:08 +0000 (20:15 +0200)
This might fail with some OpenSSL FIPS cases, so make the debug log
clearer for such a failure.

Signed-off-by: Jouni Malinen <j@w1.fi>
src/crypto/tls_openssl.c

index 77f39c63d23e10a7489d24e22d8ebf19d0cba442..aaf519be57eff4d38f6556203d4eb60320aaaf76 100644 (file)
@@ -1236,6 +1236,7 @@ void * tls_init(const struct tls_config *conf)
        else
                ssl = NULL;
        if (ssl == NULL) {
+               tls_show_errors(MSG_INFO, "SSL_CTX_new", "init");
                tls_openssl_ref_count--;
                if (context != tls_global)
                        os_free(context);