mirror of
https://github.com/rustls/rustls.git
synced 2026-10-28 17:56:30 +08:00
I don't know if it's me or everyone, but debugging TLS setup issues
is usually non-trivial.
For example, right now I'm fighting with this issue:
an `openssl s_client` works fine, but a client implemented with
rustls fails with an error:
```
Custom { kind: InvalidData, error: WebPKIError(UnknownIssuer) }
```
`WebPKIError` can be emitted for several reasons. This PR adds the
operation name to the error. I have identified five operations:
* validate server certificate
* validate client certificate
* validate certificate for DNS name
* parse the certificate
* verify message signature
The error can be expanded further later, but even this basic list
will provide some clue where to look.