degesch: log certificate verification errors

At last, there should be no more serious issues with TLS.

1 files changed, 7 insertions, 0 deletions

diff --git a/degesch.c b/degesch.c
index 70387c4..0ba4880 100644
--- a/degesch.c
+++ b/degesch.c
@@ -3860,6 +3860,13 @@ transport_tls_verify_callback (int preverify_ok, X509_STORE_CTX *ctx)
 	log_server_status (s, s->buffer, "Certificate subject: #s", subject);
 	log_server_status (s, s->buffer, "Certificate issuer: #s", issuer);
 
+	if (!preverify_ok)
+	{
+		log_server_error (s, s->buffer,
+			"Certificate verification failed: #s",
+			X509_verify_cert_error_string (X509_STORE_CTX_get_error (ctx)));
+	}
+
 	free (subject);
 	free (issuer);
 	return preverify_ok;