Call tls_log_errors at a more appropriate location; we can remove the other calls in tor_tls_verify once we are sure they never happen.

svn:r1709

1 files changed, 1 insertions, 0 deletions

diff --git a/src/common/tortls.c b/src/common/tortls.c
index 5e0deef22a..feeb3caf20 100644
--- a/src/common/tortls.c
+++ b/src/common/tortls.c
@@ -580,6 +580,7 @@ tor_tls_verify(tor_tls *tls, crypto_pk_env_t *identity_key)
   if (!(id_pkey = _crypto_pk_env_get_evp_pkey(identity_key,0)) ||
       X509_verify(cert, id_pkey) <= 0) {
     log_fn(LOG_WARN,"X509_verify on cert and pkey returned <= 0");
+    tls_log_errors(LOG_WARN,"verifying certificate");
     goto done;
   }