diff options
| author | Stéphane Rochoy <stephane.rochoy@stormshield.eu> | 2023-12-04 09:57:43 +0000 |
|---|---|---|
| committer | Ed Maste <emaste@FreeBSD.org> | 2023-12-10 20:13:56 +0000 |
| commit | 4b9d605768acabc460aa6dcfe8a1f8db35b16794 (patch) | |
| tree | 314c69aa241b9560cd433a41cb42565ccb7f5d32 /lib/libsecureboot | |
| parent | dff3a80f6dfe88c52326ceb2c154668f132fdb52 (diff) | |
| download | src-4b9d605768acabc460aa6dcfe8a1f8db35b16794.tar.gz src-4b9d605768acabc460aa6dcfe8a1f8db35b16794.zip | |
libsecureboot: be more verbose about validation failures
Reviewed by: imp, sjg
Pull Request: https://github.com/freebsd/freebsd-src/pull/916
Diffstat (limited to 'lib/libsecureboot')
| -rw-r--r-- | lib/libsecureboot/vets.c | 14 |
1 files changed, 11 insertions, 3 deletions
diff --git a/lib/libsecureboot/vets.c b/lib/libsecureboot/vets.c index 4a2aba433191..c86b198c45c5 100644 --- a/lib/libsecureboot/vets.c +++ b/lib/libsecureboot/vets.c @@ -568,9 +568,17 @@ verify_signer_xcs(br_x509_certificate *xcs, ve_error_set("Validation failed, certificate not valid as of %s", gdate(date, sizeof(date), ve_utc)); break; - default: - ve_error_set("Validation failed, err = %d", err); - break; + default: { + const char *err_desc = NULL; + const char *err_name = find_error_name(err, &err_desc); + + if (err_name == NULL) + ve_error_set("Validation failed, err = %d", + err); + else + ve_error_set("Validation failed, %s (%s)", + err_desc, err_name); + break; } } } else { tpk = mc.vtable->get_pkey(&mc.vtable, &usages); |