From: Andrew Bartlett <abartlet@samba.org>
Date: Fri, 16 Aug 2019 03:45:43 +0000 (+1200)
Subject: auth/gensec: Use gnutls_error_to_ntstatus() in netsec_do_seal()
X-Git-Tag: tevent-0.10.1~258
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=fa8eddc39b4ea9d316201019b603025df5c2fa5e;p=thirdparty%2Fsamba.git

auth/gensec: Use gnutls_error_to_ntstatus() in netsec_do_seal()

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
---

diff --git a/auth/gensec/schannel.c b/auth/gensec/schannel.c
index 18e2ed6cd36..18ed92b703b 100644
--- a/auth/gensec/schannel.c
+++ b/auth/gensec/schannel.c
@@ -302,10 +302,8 @@ static NTSTATUS netsec_do_seal(struct schannel_state *state,
 						   confounder,
 						   8);
 			if (rc < 0) {
-				DBG_ERR("ERROR: gnutls_cipher_encrypt: %s\n",
-					gnutls_strerror(errno));
 				gnutls_cipher_deinit(cipher_hnd);
-				return NT_STATUS_INTERNAL_ERROR;
+				return gnutls_error_to_ntstatus(rc, NT_STATUS_CRYPTO_SYSTEM_INVALID);
 			}
 
 			/*
@@ -317,20 +315,16 @@ static NTSTATUS netsec_do_seal(struct schannel_state *state,
 						   data,
 						   length);
 			if (rc < 0) {
-				DBG_ERR("ERROR: gnutls_cipher_encrypt: %s\n",
-					gnutls_strerror(errno));
 				gnutls_cipher_deinit(cipher_hnd);
-				return NT_STATUS_INTERNAL_ERROR;
+				return gnutls_error_to_ntstatus(rc, NT_STATUS_CRYPTO_SYSTEM_INVALID);
 			}
 		} else {
 			rc = gnutls_cipher_decrypt(cipher_hnd,
 						   confounder,
 						   8);
 			if (rc < 0) {
-				DBG_ERR("ERROR: gnutls_cipher_decrypt: %s\n",
-					gnutls_strerror(errno));
 				gnutls_cipher_deinit(cipher_hnd);
-				return NT_STATUS_INTERNAL_ERROR;
+				return gnutls_error_to_ntstatus(rc, NT_STATUS_CRYPTO_SYSTEM_INVALID);
 			}
 
 			/*
@@ -342,10 +336,8 @@ static NTSTATUS netsec_do_seal(struct schannel_state *state,
 						   data,
 						   length);
 			if (rc < 0) {
-				DBG_ERR("ERROR: gnutls_cipher_decrypt: %s\n",
-					gnutls_strerror(errno));
 				gnutls_cipher_deinit(cipher_hnd);
-				return NT_STATUS_INTERNAL_ERROR;
+				return gnutls_error_to_ntstatus(rc, NT_STATUS_CRYPTO_SYSTEM_INVALID);
 			}
 		}
 		gnutls_cipher_deinit(cipher_hnd);