]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Add message when decoding PKCS12 file fails.
authorArne Schwabe <arne@rfc2549.org>
Tue, 19 Oct 2021 18:31:22 +0000 (20:31 +0200)
committerGert Doering <gert@greenie.muc.de>
Wed, 18 May 2022 09:27:15 +0000 (11:27 +0200)
commit1f54811e92c89fe07d7cea8339e928980bfe0536
tree4f6cd045766bf9af8ec6fb5fdfd6022ce6c1aa35
parent263436fdb06cc2364f9667bc1adead70aeb93ecc
Add message when decoding PKCS12 file fails.

Currently we never display the OpenSSL error stack when decoding a
PCKS12 file fails. With LibreSSL defaulting to RC2-40-CBC, the failure
might not be a wrong password but can actually be an unsupported encoding,
seeing the error stack is really helpful (example from OpenSSL 3.0):

error:0308010C:digital envelope routines:inner_evp_generic_fetch:
  unsupported:crypto/evp/evp_fetch.c:346:Global default library
  context, Algorithm (RC2-40-CBC : 0), Properties ()

to pinpoint the issue

Signed-off-by: Arne Schwabe <arne@rfc2549.org>
Acked-by: Gert Doering <gert@greenie.muc.de>
Message-Id: <20211019183127.614175-17-arne@rfc2549.org>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg23017.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
(cherry picked from commit 6ac4e63c577986ec11eae3519fe8516e8ca8ac0f)
src/openvpn/ssl_openssl.c