Print more certificate status values.

diff --git a/src/common.c b/src/common.c
index 568c8a72a65b4c79eb5b2c5361a4559338bfe326..c1d2612d574d3656cfa4dff9ec6c1bc0558e8618 100644 (file)
--- a/src/common.c
+++ b/src/common.c
@@ -430,8 +430,14 @@ print_cert_vrfy (gnutls_session_t session)
 
   if (gnutls_certificate_type_get (session) == GNUTLS_CRT_X509)
     {
+      if (status & GNUTLS_CERT_REVOKED)
+       printf ("- Peer's certificate chain revoked\n");
       if (status & GNUTLS_CERT_SIGNER_NOT_FOUND)
        printf ("- Peer's certificate issuer is unknown\n");
+      if (status & GNUTLS_CERT_SIGNER_NOT_CA)
+       printf ("- Peer's certificate issuer is not a CA\n");
+      if (status & GNUTLS_CERT_INSECURE_ALGORITHM)
+       printf ("- Peer's certificate chain uses insecure algorithm\n");
       if (status & GNUTLS_CERT_INVALID)
        printf ("- Peer's certificate is NOT trusted\n");
       else