tree 5469df7a20965071dc970548efb74d442720e417
parent d02fdbeeeb2867ec513c0de5d045b897645dd694
author Maxim Dounin <mdounin@mdounin.ru> 1480965802 +0300
committer Maxim Dounin <mdounin@mdounin.ru> 1480965802 +0300

SSL: $ssl_client_verify extended with a failure reason.

Now in case of a verification failure $ssl_client_verify contains
"FAILED:<reason>", similar to Apache's SSL_CLIENT_VERIFY, e.g.,
"FAILED:certificate has expired".

Detailed description of possible errors can be found in the verify(1)
manual page as provided by OpenSSL.