Issue #15595 has been reported by Dustin Mitchell.

----------------------------------------
Feature #15595: Better error reporting for certificate validation failures.
https://projects.puppetlabs.com/issues/15595

Author: Dustin Mitchell
Status: In Topic Branch Pending Review
Priority: Normal
Assignee: 
Category: 
Target version: 
Affected Puppet version: 
Keywords: 
Branch: 


Currently, if certificates fail validation, Puppet randomly guesses that the 
time is out of sync.  That's often wrong, and misses real data as to what the 
error was.

The verify_callback callback gets an OpenSSL::SSL::SSLContext for each
certificate in the chain that's verified. If the verification failed,
then SSL provides a nice error to the callback, but that error doesn't
appear in the subsequent OpenSSL::SSL::SSLError.


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to