https://issues.shibboleth.net/jira/browse/CPPXT-82

[shibboleth/cpp-xmltooling.git] / xmltooling / soap / impl / CURLSOAPTransport.cpp

diff --git a/xmltooling/soap/impl/CURLSOAPTransport.cpp b/xmltooling/soap/impl/CURLSOAPTransport.cpp
index 60bc1c6..17e4d99 100644 (file)
--- a/xmltooling/soap/impl/CURLSOAPTransport.cpp
+++ b/xmltooling/soap/impl/CURLSOAPTransport.cpp
@@ -663,7 +663,7 @@ int xmltooling::verify_callback(X509_STORE_CTX* x509_ctx, void* arg)
     }
 
     if (!success) {
-        log.error("supplied TrustEngine failed to validate SSL/TLS server certificate:");
+        log.error("supplied TrustEngine failed to validate SSL/TLS server certificate");
         if (x509_ctx->cert) {
             BIO* b = BIO_new(BIO_s_mem());
             X509_print(b, x509_ctx->cert);
@@ -671,7 +671,10 @@ int xmltooling::verify_callback(X509_STORE_CTX* x509_ctx, void* arg)
             BIO_get_mem_ptr(b, &bptr);
             if (bptr && bptr->length > 0) {
                 string s(bptr->data, bptr->length);
-                log.error(s);
+                if (ctx->m_mandatory)
+                    log.error(s);
+                else
+                    log.debug(s);
             }
             BIO_free(b);
         }