Commit 2e712449 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Show errors on CSR verification failure. 

If CSR verify fails in ca utility print out error messages.
Otherwise some errors give misleading output: for example
if the key size exceeds the library limit.

PR#2875
(cherry picked from commit a30bdb55)
parent c0eae35b

apps/ca.c

+2 −0
Original line number Diff line number Diff line
@@ -1599,12 +1599,14 @@ static int certify(X509 **xret, char *infile, EVP_PKEY *pkey, X509 *x509, 
		{

		ok=0;

		BIO_printf(bio_err,"Signature verification problems....\n");

		ERR_print_errors(bio_err);

		goto err;

		}

	if (i == 0)

		{

		ok=0;

		BIO_printf(bio_err,"Signature did not match the certificate request\n");

		ERR_print_errors(bio_err);

		goto err;

		}

	else