From 2e7124497d26570049e8777eeb79a7ff27ecb882 Mon Sep 17 00:00:00 2001 From: "Dr. Stephen Henson" Date: Sun, 29 Jun 2014 13:31:57 +0100 Subject: [PATCH] Show errors on CSR verification failure. If CSR verify fails in ca utility print out error messages. Otherwise some errors give misleading output: for example if the key size exceeds the library limit. PR#2875 (cherry picked from commit a30bdb55d1361b9926eef8127debfc2e1bb8c484) --- apps/ca.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/apps/ca.c b/apps/ca.c index 3f628900d2..5fa5b6b2c1 100644 --- a/apps/ca.c +++ b/apps/ca.c @@ -1599,12 +1599,14 @@ static int certify(X509 **xret, char *infile, EVP_PKEY *pkey, X509 *x509, { ok=0; BIO_printf(bio_err,"Signature verification problems....\n"); + ERR_print_errors(bio_err); goto err; } if (i == 0) { ok=0; BIO_printf(bio_err,"Signature did not match the certificate request\n"); + ERR_print_errors(bio_err); goto err; } else -- 2.25.1