Skip to content

Commit fe812c3

Browse files
author
Mika Leppänen
committed
Changed certificate error message wording to be less fatal
1 parent 97aaf5f commit fe812c3

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

source/Security/protocols/tls_sec_prot/tls_sec_prot_lib.c

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -550,7 +550,7 @@ static int tls_sec_prot_lib_x509_crt_idevid_ldevid_verify(tls_security_t *sec, m
550550
// For both IDevID and LDevId both subject alternative name or extended key usage must be valid
551551
if (tls_sec_prot_lib_subject_alternative_name_validate(crt) < 0 ||
552552
tls_sec_prot_lib_extended_key_usage_validate(crt) < 0) {
553-
tr_error("invalid cert");
553+
tr_info("no wisun fields on cert");
554554
if (sec->ext_cert_valid) {
555555
*flags |= MBEDTLS_X509_BADCERT_OTHER;
556556
return MBEDTLS_ERR_X509_CERT_VERIFY_FAILED;
@@ -570,7 +570,7 @@ static int tls_sec_prot_lib_x509_crt_server_verify(tls_security_t *sec, mbedtls_
570570
if (sane_res >= 0 || ext_key_res >= 0) {
571571
// Then both subject alternative name and extended key usage must be valid
572572
if (sane_res < 0 || ext_key_res < 0) {
573-
tr_error("invalid cert");
573+
tr_info("no wisun fields on cert");
574574
if (sec->ext_cert_valid) {
575575
*flags |= MBEDTLS_X509_BADCERT_OTHER;
576576
return MBEDTLS_ERR_X509_CERT_VERIFY_FAILED;

0 commit comments

Comments
 (0)