From 714faea4fa7f30d42e9986358214a99aa8fa57b3 Mon Sep 17 00:00:00 2001
From: Werner Koch <wk@gnupg.org>
Date: Sun, 8 Jan 2017 18:07:18 +0100
Subject: [PATCH] dirmngr: Improve debug output for TLS.

* dirmngr/misc.c (dump_cert): Also print SubjectAltNames.

Signed-off-by: Werner Koch <wk@gnupg.org>
---
 dirmngr/misc.c | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/dirmngr/misc.c b/dirmngr/misc.c
index ac3856e09..2ee6d82bd 100644
--- a/dirmngr/misc.c
+++ b/dirmngr/misc.c
@@ -296,6 +296,7 @@ dump_cert (const char *text, ksba_cert_t cert)
   ksba_sexp_t sexp;
   char *p;
   ksba_isotime_t t;
+  int idx;
 
   log_debug ("BEGIN Certificate '%s':\n", text? text:"");
   if (cert)
@@ -326,6 +327,13 @@ dump_cert (const char *text, ksba_cert_t cert)
       dump_string (p);
       ksba_free (p);
       log_printf ("\n");
+      for (idx=1; (p = ksba_cert_get_subject (cert, idx)); idx++)
+        {
+          log_debug ("        aka: ");
+          dump_string (p);
+          ksba_free (p);
+          log_printf ("\n");
+        }
 
       log_debug ("  hash algo: %s\n", ksba_cert_get_digest_algo (cert));