Changeset 51823 in vbox for trunk/src

Timestamp:

Jul 2, 2014 10:29:20 PM (11 years ago)

Author:

vboxsync

Message:

Better error message.

File:

• trunk/src/VBox/Runtime/common/crypto/x509-certpaths.cpp (modified) (2 diffs)

trunk/src/VBox/Runtime/common/crypto/x509-certpaths.cpp

@@ -270 +270 @@
     /** An object identifier initialized to anyPolicy. */
     RTASN1OBJID                         AnyPolicyObjId;
+
+    /** Temporary scratch space. */
+    char                                szTmp[1024];
 } RTCRX509CERTPATHSINT;
 typedef RTCRX509CERTPATHSINT *PRTCRX509CERTPATHSINT;
@@ -1963 +1966 @@
      * 6.1.3.a.2 - Verify that the certificate is valid at the specified time.
      */
+    AssertCompile(sizeof(pThis->szTmp) >= 36 * 3);
     if (!RTCrX509Validity_IsValidAtTimeSpec(&pNode->pCert->TbsCertificate.Validity, &pThis->ValidTime))
-        return rtCrX509CpvFailed(pThis, VERR_CR_X509_CPV_NOT_VALID_AT_TIME, "Certificate is not valid");
+        return rtCrX509CpvFailed(pThis, VERR_CR_X509_CPV_NOT_VALID_AT_TIME,
+                                 "Certificate is not valid (ValidTime=%s Validity=[%s...%s])",
+                                 RTTimeSpecToString(&pThis->ValidTime, &pThis->szTmp[0], 36),
+                                 RTTimeToString(&pNode->pCert->TbsCertificate.Validity.NotBefore.Time, &pThis->szTmp[36], 36),
+                                 RTTimeToString(&pNode->pCert->TbsCertificate.Validity.NotAfter.Time,  &pThis->szTmp[2*36], 36) );
 
     /*