Call tls_log_errors at a more appropriate location; we can remove the other calls...

svn:r1709

diff --git a/src/common/tortls.c b/src/common/tortls.c
index 5e0deef22a0e2a6d0bc4188b67c01a76750950ca..feeb3caf205fe6095e61318acd3dfe3bc944fad8 100644 (file)
--- a/src/common/tortls.c
+++ b/src/common/tortls.c
@@ -580,6 +580,7 @@ tor_tls_verify(tor_tls *tls, crypto_pk_env_t *identity_key)
   if (!(id_pkey = _crypto_pk_env_get_evp_pkey(identity_key,0)) ||
       X509_verify(cert, id_pkey) <= 0) {
     log_fn(LOG_WARN,"X509_verify on cert and pkey returned <= 0");
+    tls_log_errors(LOG_WARN,"verifying certificate");
     goto done;
   }