aboutsummaryrefslogtreecommitdiffstats
path: root/crypto
diff options
context:
space:
mode:
authorTodd Short <tshort@akamai.com>2015-03-31 17:06:21 -0400
committerRich Salz <rsalz@openssl.org>2017-04-12 14:41:10 -0400
commit3bb0f989b53c59c6d4527a0b5077dbb7fabe14b7 (patch)
treeb03c7f9c1698d3d50d242281bcd7c8d9135cfbbe /crypto
parent2da3f9687fc0efd56d1269dfda4c9ca5b388038a (diff)
downloadopenssl-3bb0f989b53c59c6d4527a0b5077dbb7fabe14b7.tar.gz
OCSP Updates: error codes and multiple certificates
RT3877: Add X509 OCSP error codes and messages Add additional OCSP error codes for X509 verify usage RT3867: Support Multiple CA certs in ocsp app Add the ability to read multiple CA certs from a single file in the ocsp app. Update some missing X509 errors in documentation. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/941)
Diffstat (limited to 'crypto')
-rw-r--r--crypto/x509/x509_txt.c6
1 files changed, 6 insertions, 0 deletions
diff --git a/crypto/x509/x509_txt.c b/crypto/x509/x509_txt.c
index 66e5fcd02f..a460bf5474 100644
--- a/crypto/x509/x509_txt.c
+++ b/crypto/x509/x509_txt.c
@@ -169,6 +169,12 @@ const char *X509_verify_cert_error_string(long n)
return ("Certificate Transparency required, but no valid SCTs found");
case X509_V_ERR_PROXY_SUBJECT_NAME_VIOLATION:
return ("proxy subject name violation");
+ case X509_V_ERR_OCSP_VERIFY_NEEDED:
+ return("OCSP verification needed");
+ case X509_V_ERR_OCSP_VERIFY_FAILED:
+ return("OCSP verification failed");
+ case X509_V_ERR_OCSP_CERT_UNKNOWN:
+ return("OCSP unknown cert");
default:
/* Printing an error number into a static buffer is not thread-safe */