From: Wouter Wijngaards <wouter@nlnetlabs.nl>
Date: Thu, 30 Sep 2010 12:31:22 +0000 (+0000)
Subject: print cert error on failure
X-Git-Tag: release-1.4.7rc1~58
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=45ef5b2ad6cfc0283af6b016f66e8e805e49e23a;p=thirdparty%2Funbound.git

print cert error on failure

git-svn-id: file:///svn/unbound/trunk@2267 be551aaa-1e26-0410-a405-d3ace91eadb9
---

diff --git a/smallapp/unbound-anchor.c b/smallapp/unbound-anchor.c
index 2a643b054..746438618 100644
--- a/smallapp/unbound-anchor.c
+++ b/smallapp/unbound-anchor.c
@@ -1476,6 +1476,7 @@ verify_p7sig(BIO* data, BIO* p7s, STACK_OF(X509)* trust, time_t now)
 
 	/* convert trust to trusted certificate store */
 	/* set current time */
+	if(verb >= 2) printf("time set to %u %s", (unsigned)now, ctime(&now));
 	X509_VERIFY_PARAM_set_time(param, now);
 	/* do the selfcheck on the root certificate; it checks that the
 	 * input is valid */
@@ -1496,6 +1497,10 @@ verify_p7sig(BIO* data, BIO* p7s, STACK_OF(X509)* trust, time_t now)
 	if(PKCS7_verify(p7, NULL, store, data, NULL, 0) == 1) {
 		secure = 1;
 		if(verb) printf("the PKCS7 signature verified\n");
+	} else {
+		if(verb) {
+			ERR_print_errors_fp(stdout);
+		}
 	}
 
 	X509_STORE_free(store);