gnutls-cli: be less verbose in OCSP error messages

Previously we were reporting "No issuer found" if any certificate
in a chain could not be verified. That was confusing information
and not strictly necessary. No longer print that.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

1 files changed, 2 insertions, 1 deletions

diff --git a/src/cli.c b/src/cli.c
index 834f1ff262..32fdd41fd2 100644
--- a/src/cli.c
+++ b/src/cli.c
@@ -1965,7 +1965,8 @@ static int cert_verify_ocsp(gnutls_session_t session)
 				goto cleanup;
 			}
 		} else if (ret < 0) {
-			fprintf(stderr, "Cannot find issuer\n");
+			if (it == 0)
+				fprintf(stderr, "Cannot find issuer: %s\n", gnutls_strerror(ret));
 			goto cleanup;
 		}