summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorNalin Dahyabhai <nalin@dahyabhai.net>2013-04-24 13:52:23 -0400
committerGreg Hudson <ghudson@mit.edu>2013-05-10 19:05:38 -0400
commit333d3acefc8ca386fa006dd7aa5fdacb48d5b088 (patch)
treeaed879d277905019086db18060521af59d6737dd
parent88fe4c49320592047ae416887f27c1d74832ddac (diff)
downloadkrb5-333d3acefc8ca386fa006dd7aa5fdacb48d5b088.tar.gz
krb5-333d3acefc8ca386fa006dd7aa5fdacb48d5b088.tar.xz
krb5-333d3acefc8ca386fa006dd7aa5fdacb48d5b088.zip
When DEBUG=1, log why we fail to log in to a token
Use PORT_ErrorToName() to let us print an error name instead of an error code in a couple of debug messages, since in practice we just end up looking up the code in <secerr.h> anyway.
-rw-r--r--src/plugins/preauth/pkinit/pkinit_crypto_nss.c10
1 files changed, 6 insertions, 4 deletions
diff --git a/src/plugins/preauth/pkinit/pkinit_crypto_nss.c b/src/plugins/preauth/pkinit/pkinit_crypto_nss.c
index f9e9b979a..b1f04732c 100644
--- a/src/plugins/preauth/pkinit/pkinit_crypto_nss.c
+++ b/src/plugins/preauth/pkinit/pkinit_crypto_nss.c
@@ -1911,8 +1911,9 @@ cert_load_ca_certs_from_slot(krb5_context context,
__FUNCTION__, PK11_GetTokenName(slot));
if (PK11_Authenticate(slot, PR_TRUE,
crypto_pwcb_prep(id, context)) != SECSuccess) {
- pkiDebug("%s: error logging into \"%s\", skipping\n",
- __FUNCTION__, PK11_GetTokenName(slot));
+ pkiDebug("%s: error logging into \"%s\": %s, skipping\n",
+ __FUNCTION__, PK11_GetTokenName(slot),
+ PORT_ErrorToName(PORT_GetError()));
return SECFailure;
}
}
@@ -1983,8 +1984,9 @@ cert_load_certs_with_keys_from_slot(krb5_context context,
if (PK11_Authenticate(slot, PR_TRUE,
crypto_pwcb_prep(id_cryptoctx,
context)) != SECSuccess) {
- pkiDebug("%s: error logging into \"%s\", skipping\n",
- __FUNCTION__, PK11_GetTokenName(slot));
+ pkiDebug("%s: error logging into \"%s\": %s, skipping\n",
+ __FUNCTION__, PK11_GetTokenName(slot),
+ PORT_ErrorToName(PORT_GetError()));
return ENOMEM;
}
}