Print whether verification failed due to an insecure algorithm.

diff --git a/src/certtool.c b/src/certtool.c
index 4cb7f60a592eeda21469d16491b6b82402c75d57..181eda49dd53cb0deccb91feae0a5ebf9c2b93cf 100644 (file)
--- a/src/certtool.c
+++ b/src/certtool.c
@@ -2240,6 +2240,13 @@ static void print_verification_res(gnutls_x509_crt crt,
        comma = 1;
     }
 
+    if (output & GNUTLS_CERT_INSECURE_ALGORITHM) {
+      if (comma)
+       fprintf(outfile, ", ");
+      fprintf(outfile, "Insecure algorithm");
+      comma = 1;
+    }
+
     /* Check expiration dates.
      */
 
@@ -2343,6 +2350,13 @@ void verify_crl(void)
        comma = 1;
     }
 
+    if (output & GNUTLS_CERT_INSECURE_ALGORITHM) {
+      if (comma)
+       fprintf(outfile, ", ");
+      fprintf(outfile, "Insecure algorithm");
+      comma = 1;
+    }
+
     /* Check expiration dates.
      */