Add detail to error observed when TLS PSK is wrong

diff --git a/src/main/tls.c b/src/main/tls.c
index 63a1c79139149588319184d4f86742c126d9f58e..035cd4f6f9eec18301ca3cddfe79bd44ac41f970 100644 (file)
--- a/src/main/tls.c
+++ b/src/main/tls.c
@@ -1308,6 +1308,9 @@ void tls_session_information(tls_session_t *tls_session)
 
                                case SSL3_AD_ILLEGAL_PARAMETER:
                                        str_details2 = " illegal_parameter";
+                                       if (tls_session->conf->psk_identity || tls_session->conf->psk_query) {
+                                               details = "the client and server have different values for the PSK";
+                                       }
                                        break;
 
                                case TLS1_AD_UNKNOWN_CA: