upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2025-12-21 15:21:05 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

- Fix for #997: Print details for SSL certificate failure.

Browse source
This commit is contained in:
W.C.A. Wijngaards 2024-01-22 09:40:36 +01:00
parent 585d73bf7c
commit 1f46d5945b
2 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
doc/Changelog
View file

@ -1,3 +1,6 @@
22 January 2024: Wouter
- Fix for #997: Print details for SSL certificate failure.
17 January 2024: Wouter 17 January 2024: Wouter
- Update workflow for ports to use newer openssl on windows compile. - Update workflow for ports to use newer openssl on windows compile.
- Fix warning for windres on resource files due to redefinition. - Fix warning for windres on resource files due to redefinition.

5
util/netevent.c
View file

@ -1672,8 +1672,13 @@ ssl_handshake(struct comm_point* c)
} else { } else {
unsigned long err = ERR_get_error(); unsigned long err = ERR_get_error();
if(!squelch_err_ssl_handshake(err)) { if(!squelch_err_ssl_handshake(err)) {
long vr;
log_crypto_err_io_code("ssl handshake failed", log_crypto_err_io_code("ssl handshake failed",
want, err); want, err);
if((vr=SSL_get_verify_result(c->ssl)) != 0)
log_err("ssl handshake cert error: %s",
X509_verify_cert_error_string(
vr));
log_addr(VERB_OPS, "ssl handshake failed", log_addr(VERB_OPS, "ssl handshake failed",
&c->repinfo.remote_addr, &c->repinfo.remote_addr,
c->repinfo.remote_addrlen); c->repinfo.remote_addrlen);