From: Simon Josefsson <simon@josefsson.org>
Date: Mon, 2 Feb 2009 14:35:44 +0000 (+0100)
Subject: Print more certificate status values.
X-Git-Tag: gnutls_2_7_5~7
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=ca454bb3a9be7197d19f69de251bbd4473d5f015;p=thirdparty%2Fgnutls.git

Print more certificate status values.
---

diff --git a/src/common.c b/src/common.c
index 568c8a72a6..c1d2612d57 100644
--- a/src/common.c
+++ b/src/common.c
@@ -430,8 +430,14 @@ print_cert_vrfy (gnutls_session_t session)
 
   if (gnutls_certificate_type_get (session) == GNUTLS_CRT_X509)
     {
+      if (status & GNUTLS_CERT_REVOKED)
+	printf ("- Peer's certificate chain revoked\n");
       if (status & GNUTLS_CERT_SIGNER_NOT_FOUND)
 	printf ("- Peer's certificate issuer is unknown\n");
+      if (status & GNUTLS_CERT_SIGNER_NOT_CA)
+	printf ("- Peer's certificate issuer is not a CA\n");
+      if (status & GNUTLS_CERT_INSECURE_ALGORITHM)
+	printf ("- Peer's certificate chain uses insecure algorithm\n");
       if (status & GNUTLS_CERT_INVALID)
 	printf ("- Peer's certificate is NOT trusted\n");
       else