diff --git a/lib/hx509/hx509.h b/lib/hx509/hx509.h
index 751364a15..3bb56f51b 100644
--- a/lib/hx509/hx509.h
+++ b/lib/hx509/hx509.h
@@ -47,6 +47,7 @@ typedef struct hx509_revoke_ctx_data *hx509_revoke_ctx;
 typedef struct hx509_query_data hx509_query;
 typedef void * hx509_cursor;
 typedef struct hx509_request_data *hx509_request;
+typedef struct hx509_error_data *hx509_error;
 
 
 typedef void (*hx509_vprint_func)(void *, const char *, va_list);
@@ -91,4 +92,8 @@ typedef enum {
     HX509_QUERY_OPTION_END = 0xffff
 } hx509_query_option;
 
+enum hx509_error_flag {
+    HX509_ERROR_APPEND = 1,
+};
+
 #include <hx509-protos.h>
diff --git a/lib/hx509/hx_locl.h b/lib/hx509/hx_locl.h
index e7c0933db..cd02b18a0 100644
--- a/lib/hx509/hx_locl.h
+++ b/lib/hx509/hx_locl.h
@@ -49,6 +49,7 @@
 #include <base64.h>
 #include <hex.h>
 #include <roken.h>
+#include <com_err.h>
 
 #include <krb5-types.h>
 
@@ -154,5 +155,7 @@ struct hx509_context_data {
 #define HX509_CTX_VERIFY_MISSING_OK	1
     int ocsp_time_diff;
 #define HX509_DEFAULT_OCSP_TIME_DIFF	(5*60)
+    hx509_error error;
+    struct et_list *et_list;
 };