Bug 2508

Summary: Wanting OpenSSL error messages in ssherr() for SSH_ERR_LIBCRYPTO_ERROR
Product: Portable OpenSSH Reporter: Tomas Kuthan <tomas.kuthan>
Component: MiscellaneousAssignee: Assigned to nobody <unassigned-bugs>
Status: NEW ---    
Severity: enhancement    
Priority: P5    
Version: 7.1p1   
Hardware: SPARC   
OS: Solaris   
Attachments:
Description Flags
Simple and thread-unsafe patch to add OpenSSL error strings to ssherr() none

Description Tomas Kuthan 2015-11-27 02:24:55 AEDT
After code refactoring for library-like interfaces,OpenSSL error string were replaced by generic and vague "error in libcrypto" message.

This enhancement asks for returning OpenSSL error strings for SSH_ERR_LIBCRYPTO_ERROR errors.
Comment 1 Tomas Kuthan 2015-11-27 02:32:26 AEDT
Created attachment 2759 [details]
Simple and thread-unsafe patch to add OpenSSL error strings to ssherr()

For use in single-threaded OpenSSH binaries this patch based on static error buffer for OpenSSL error strings should be sufficient.

For library API this would hardly be suitable.
Providing contextual error messages would probably require a more robust and flexible error message framework.