From: Dr. Stephen Henson <steve@openssl.org>
Date: Sun, 29 Jun 2014 12:31:57 +0000 (+0100)
Subject: Show errors on CSR verification failure.
X-Git-Tag: upstream/1.0.1i~69
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=fc1a03c8be99e25358bdd982d843f98c3c5e1fda;p=platform%2Fupstream%2Fopenssl.git

Show errors on CSR verification failure.

If CSR verify fails in ca utility print out error messages.
Otherwise some errors give misleading output: for example
if the key size exceeds the library limit.

PR#2875
(cherry picked from commit a30bdb55d1361b9926eef8127debfc2e1bb8c484)
---

diff --git a/apps/ca.c b/apps/ca.c
index cf7c044..9c25026 100644
--- a/apps/ca.c
+++ b/apps/ca.c
@@ -1620,12 +1620,14 @@ static int certify(X509 **xret, char *infile, EVP_PKEY *pkey, X509 *x509,
 		{
 		ok=0;
 		BIO_printf(bio_err,"Signature verification problems....\n");
+		ERR_print_errors(bio_err);
 		goto err;
 		}
 	if (i == 0)
 		{
 		ok=0;
 		BIO_printf(bio_err,"Signature did not match the certificate request\n");
+		ERR_print_errors(bio_err);
 		goto err;
 		}
 	else