[Pulp-list] Certificate Verification Failure Debugging

[John Matthews]

We added 2 config options which will log more information about certificate verification failures.

$ cat /etc/pulp/repo_auth.conf 
[main]
enabled: false
log_failed_cert: true
log_failed_cert_verbose: false

If a certificate fails verification we will log summary info about each Certificate/CA/CRL, additionally you may enable 'log_failed_cert_verbose' and it will output the full decoded text of the Certificate to verify as well.


https://fedorahosted.org/pulp/wiki/Certificates/Debugging