summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorStef Walter <stefw@redhat.com>2014-08-08 08:47:23 +0200
committerStef Walter <stef@thewalter.net>2014-08-08 18:44:51 +0200
commit1576ac9495333d0f285e0ab69f444d3ae0630859 (patch)
tree4a3d6cb9c1d80aac7e8fa73ecad908ad5b7a515b
parentd9df354fffbbfa42aac796235cf446c63ad2eef8 (diff)
downloadp11-kit-1576ac9495333d0f285e0ab69f444d3ae0630859.tar.gz
trust: Print label of certificate when complaining about basic constraints
https://bugs.freedesktop.org/show_bug.cgi?id=82328
-rw-r--r--trust/builder.c6
1 files changed, 5 insertions, 1 deletions
diff --git a/trust/builder.c b/trust/builder.c
index 18c09ad..f7ea86a 100644
--- a/trust/builder.c
+++ b/trust/builder.c
@@ -551,6 +551,7 @@ calc_certificate_category (p11_builder *builder,
CK_ATTRIBUTE *public_key,
CK_ULONG *category)
{
+ CK_ATTRIBUTE *label;
unsigned char *ext;
size_t ext_len;
bool is_ca = 0;
@@ -570,7 +571,10 @@ calc_certificate_category (p11_builder *builder,
ret = p11_x509_parse_basic_constraints (builder->asn1_defs, ext, ext_len, &is_ca);
free (ext);
if (!ret) {
- p11_message ("invalid basic constraints certificate extension");
+ label = p11_attrs_find_valid (cert, CKA_LABEL);
+ p11_message ("%.*s: invalid basic constraints certificate extension",
+ label ? (int)label->ulValueLen : 7,
+ label ? (char *)label->pValue : "unknown");
return false;
}