oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

better error messages

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24179 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2008-12-15 04:28:43 +00:00
parent 8671326a06
commit 49ff682fff
1 changed files with 11 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
kdc/pkinit.c
View File

@@ -411,7 +411,7 @@ _kdc_pk_rd_padata(krb5_context context,
free_PA_PK_AS_REQ_Win2k(&r);
if (ret) {
krb5_set_error_message(context, ret,
"Can't decode PK-AS-REQ: %d", ret);
"Can't unwrap ContentInfo(win): %d", ret);
goto out;
}
@@ -1650,10 +1650,17 @@ _kdc_pk_initialize(krb5_context context,
hx509_query_free(kdc_identity->hx509ctx, q);
if (ret == 0) {
if (hx509_cert_check_eku(kdc_identity->hx509ctx, cert,
oid_id_pkkdcekuoid(), 0))
krb5_warnx(context, "WARNING Found KDC certificate "
oid_id_pkkdcekuoid(), 0)) {
hx509_name name;
char *str;
ret = hx509_cert_get_subject(cert, &name);
hx509_name_to_string(name, &str);
krb5_warnx(context, "WARNING Found KDC certificate (%s)"
"is missing the PK-INIT KDC EKU, this is bad for "
"interoperability.");
"interoperability.", str);
hx509_name_free(&name);
free(str);
}
hx509_cert_free(cert);
} else
krb5_warnx(context, "PKINIT: failed to find a signing "