From dcb53a0099b8f0dfa4ff3b9e208aa4cf0144dcc8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= <lha@kth.se>
Date: Tue, 7 Nov 2006 17:19:17 +0000
Subject: [PATCH] Sprinkle error strings.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18932 ec53bebd-3082-4978-b11e-865c3cabbd6b
---
 lib/hx509/revoke.c | 18 ++++++++++++++----
 1 file changed, 14 insertions(+), 4 deletions(-)

diff --git a/lib/hx509/revoke.c b/lib/hx509/revoke.c
index 55d4893c2..bc69dc310 100644
--- a/lib/hx509/revoke.c
+++ b/lib/hx509/revoke.c
@@ -169,8 +169,11 @@ verify_ocsp(hx509_context context,
 						&s->signatureAlgorithm,
 						&s->tbsCertificate._save,
 						&s->signatureValue);
-	if (ret)
+	if (ret) {
+	    hx509_set_error_string(context, 0, ret,
+				   "OSCP signer signature invalid");
 	    goto out;
+	}
 
 	ret = hx509_cert_check_eku(context, signer, 
 				   oid_id_kp_OCSPSigning(), 0);
@@ -182,8 +185,10 @@ verify_ocsp(hx509_context context,
 					    &ocsp->ocsp.signatureAlgorithm,
 					    &ocsp->ocsp.tbsResponseData._save,
 					    &ocsp->ocsp.signature);
-    if (ret)
+    if (ret) {
+	hx509_set_error_string(context, 0, ret, "OSCP signature invalid");
 	goto out;
+    }
 
     ocsp->signer = signer;
     signer = NULL;
@@ -416,8 +421,11 @@ verify_crl(hx509_context context,
 						&s->signatureAlgorithm,
 						&s->tbsCertificate._save,
 						&s->signatureValue);
-	if (ret)
+	if (ret) {
+	    hx509_set_error_string(context, 0, ret,
+				   "CRL signer signature invalid");
 	    goto out;
+	}
 
 	ret = _hx509_check_key_usage(context, signer, 1 << 6, TRUE); /* crl */
 	if (ret != 0)
@@ -428,8 +436,10 @@ verify_crl(hx509_context context,
 					    &crl->signatureAlgorithm,
 					    &crl->tbsCertList._save,
 					    &crl->signatureValue);
-    if (ret)
+    if (ret) {
+	hx509_set_error_string(context, 0, ret, "CRL signature invalid");
 	goto out;
+    }
 
 out:
     hx509_cert_free(signer);