openssl: show which critical X.509 extension is not supported
authorMartin Willi <martin@revosec.ch>
Tue, 30 Apr 2013 09:46:11 +0000 (11:46 +0200)
committerMartin Willi <martin@revosec.ch>
Thu, 18 Jul 2013 10:17:53 +0000 (12:17 +0200)
src/libstrongswan/plugins/openssl/openssl_x509.c

index c98e805..f15f511 100644 (file)
@@ -977,7 +977,12 @@ static bool parse_extensions(private_openssl_x509_t *this)
                                                                "libstrongswan.x509.enforce_critical", TRUE);
                                        if (!ok)
                                        {
-                                               DBG1(DBG_LIB, "found unsupported critical X.509 extension");
+                                               char buf[80] = "";
+
+                                               OBJ_obj2txt(buf, sizeof(buf),
+                                                                       X509_EXTENSION_get_object(ext), 0);
+                                               DBG1(DBG_LIB, "found unsupported critical X.509 "
+                                                        "extension: %s", buf);
                                        }
                                        break;
                        }