From 5de49512520dd60ac63a9c7e4c9de11368de3527 Mon Sep 17 00:00:00 2001 From: William Lallemand Date: Thu, 27 Oct 2022 14:41:07 +0200 Subject: [PATCH] MINOR: ssl: dump the SSL string error when SSL_CTX_use_PrivateKey() failed. Display the OpenSSL reason error string when SSL_CTX_use_PrivateKey() failed. --- src/ssl_sock.c | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/src/ssl_sock.c b/src/ssl_sock.c index 4a16f6f0c..6b38d4031 100644 --- a/src/ssl_sock.c +++ b/src/ssl_sock.c @@ -3720,9 +3720,14 @@ static int ssl_sock_put_ckch_into_ctx(const char *path, const struct cert_key_an int errcode = 0; STACK_OF(X509) *find_chain = NULL; + ERR_clear_error(); + if (SSL_CTX_use_PrivateKey(ctx, ckch->key) <= 0) { - memprintf(err, "%sunable to load SSL private key into SSL Context '%s'.\n", - err && *err ? *err : "", path); + int ret; + + ret = ERR_get_error(); + memprintf(err, "%sunable to load SSL private key into SSL Context '%s': %s.\n", + err && *err ? *err : "", path, ERR_reason_error_string(ret)); errcode |= ERR_ALERT | ERR_FATAL; return errcode; }