From cd9b82ba09da11481e7606e504d33d5121d5a2be Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Markus=20M=C3=A4kel=C3=A4?= <markus.makela@mariadb.com>
Date: Thu, 28 Nov 2019 18:57:42 +0200
Subject: [PATCH] Print OpenSSL errors on CA cert errors

This helps figure out why the certificate is not OK.
---
 server/core/listener.cc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server/core/listener.cc b/server/core/listener.cc
index 677cf3a7d..01f47a9a7 100644
--- a/server/core/listener.cc
+++ b/server/core/listener.cc
@@ -383,7 +383,7 @@ bool SSL_LISTENER_init(SSL_LISTENER* ssl)
     /* Load the CA certificate into the SSL_CTX structure */
     if (!SSL_CTX_load_verify_locations(ctx, ssl->ssl_ca_cert, NULL))
     {
-        MXS_ERROR("Failed to set Certificate Authority file");
+        MXS_ERROR("Failed to set Certificate Authority file: %s", get_ssl_errors());
         rval = false;
     }