From 05358d73841149f64dc5d620f4b8855255e7f4da Mon Sep 17 00:00:00 2001
From: Werner Koch <wk@gnupg.org>
Date: Thu, 27 Aug 2020 09:02:21 +0200
Subject: [PATCH] dirmngr: Print the last alert message returned by NTBTLS.

* dirmngr/http.c (send_request): Print the last TLS alert.

Signed-off-by: Werner Koch <wk@gnupg.org>
---
 dirmngr/http.c | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/dirmngr/http.c b/dirmngr/http.c
index 50b9b732b..f3d98e14b 100644
--- a/dirmngr/http.c
+++ b/dirmngr/http.c
@@ -2056,6 +2056,14 @@ send_request (ctrl_t ctrl, http_t hd, const char *httphost, const char *auth,
 
       while ((err = ntbtls_handshake (hd->session->tls_session)))
         {
+#if NTBTLS_VERSION_NUMBER >= 0x000200
+          unsigned int tlevel, ttype;
+          const char *s = ntbtls_get_last_alert (hd->session->tls_session,
+                                                 &tlevel, &ttype);
+          if (s)
+            log_info ("TLS alert: %s (%u.%u)\n", s, tlevel, ttype);
+#endif
+
           switch (err)
             {
             default: