# HG changeset patch
# User Timo Sirainen <tss@iki.fi>
# Date 1379638870 -10800
# Node ID ac832f051b49a5365e300edff72c0a0f62b9fb5a
# Parent  98702a45784c43d1e0d67bf6057468789516f56d
lib-ssl-iostream: Give better error message if CA settings are missing.

diff -r 98702a45784c -r ac832f051b49 src/lib-ssl-iostream/iostream-openssl-context.c
--- a/src/lib-ssl-iostream/iostream-openssl-context.c	Fri Sep 20 03:54:31 2013 +0300
+++ b/src/lib-ssl-iostream/iostream-openssl-context.c	Fri Sep 20 04:01:10 2013 +0300
@@ -349,7 +349,9 @@
 	}
 
 	if (!have_ca) {
-		*error_r = "Can't verify remote certs without CA";
+		*error_r = !ctx->client_ctx ?
+			"Can't verify remote client certs without CA (ssl_ca setting)" :
+			"Can't verify remote server certs without trusted CAs (ssl_client_ca_* settings)";
 		return -1;
 	}
 	return 0;