print cert error on failure

git-svn-id: file:///svn/unbound/trunk@2267 be551aaa-1e26-0410-a405-d3ace91eadb9

diff --git a/smallapp/unbound-anchor.c b/smallapp/unbound-anchor.c
index 2a643b0544c0788bcdbed79c49e7403f1aca20c8..7464386183b95127af2ab98deaffbbf145c03d14 100644 (file)
--- a/smallapp/unbound-anchor.c
+++ b/smallapp/unbound-anchor.c
@@ -1476,6 +1476,7 @@ verify_p7sig(BIO* data, BIO* p7s, STACK_OF(X509)* trust, time_t now)
 
        /* convert trust to trusted certificate store */
        /* set current time */
+       if(verb >= 2) printf("time set to %u %s", (unsigned)now, ctime(&now));
        X509_VERIFY_PARAM_set_time(param, now);
        /* do the selfcheck on the root certificate; it checks that the
         * input is valid */
@@ -1496,6 +1497,10 @@ verify_p7sig(BIO* data, BIO* p7s, STACK_OF(X509)* trust, time_t now)
        if(PKCS7_verify(p7, NULL, store, data, NULL, 0) == 1) {
                secure = 1;
                if(verb) printf("the PKCS7 signature verified\n");
+       } else {
+               if(verb) {
+                       ERR_print_errors_fp(stdout);
+               }
        }
 
        X509_STORE_free(store);