mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2024-12-22 21:55:25 +00:00
libvirtd: improve the error message displayed on tls client auth failure
This address BZ # 556599: https://bugzilla.redhat.com/show_bug.cgi?id=556599
This commit is contained in:
parent
8a93dafc5f
commit
63d1b07f83
@ -1226,7 +1226,7 @@ remoteCheckCertificate (gnutls_session_t session)
|
||||
if (i == 0) {
|
||||
if (!remoteCheckDN (cert)) {
|
||||
/* This is the most common error: make it informative. */
|
||||
VIR_ERROR0(_("remoteCheckCertificate: client's Distinguished Name is not on the list of allowed clients (tls_allowed_dn_list). Use 'openssl x509 -in clientcert.pem -text' to view the Distinguished Name field in the client certificate, or run this daemon with --verbose option."));
|
||||
VIR_ERROR0(_("remoteCheckCertificate: client's Distinguished Name is not on the list of allowed clients (tls_allowed_dn_list). Use 'certtool -i --infile clientcert.pem' to view the Distinguished Name field in the client certificate, or run this daemon with --verbose option."));
|
||||
gnutls_x509_crt_deinit (cert);
|
||||
return -1;
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user