#
# Return OpenSSL error messages in ssherr() for SSH_ERR_LIBCRYPTO_ERROR.
#
# After code refactoring for library-like interfaces,OpenSSL error string
# were replaced by generic and vague "error in libcrypto" message.
#
# This patch returns OpenSSL error strings for SSH_ERR_LIBCRYPTO_ERROR errors.
#
# Patch submitted upstream:
# https://bugzilla.mindrot.org/show_bug.cgi?id=2508
#
diff -pur old/ssherr.c new/ssherr.c
--- old/ssherr.c
+++ new/ssherr.c
@@ -17,11 +17,13 @@
 
 #include <errno.h>
 #include <string.h>
+#include <openssl/err.h>
 #include "ssherr.h"
 
 const char *
 ssh_err(int n)
 {
+	static char err_str[256];
 	switch (n) {
 	case SSH_ERR_SUCCESS:
 		return "success";
@@ -68,7 +70,8 @@ ssh_err(int n)
 	case SSH_ERR_SIGNATURE_INVALID:
 		return "incorrect signature";
 	case SSH_ERR_LIBCRYPTO_ERROR:
-		return "error in libcrypto";  /* XXX fetch and return */
+		ERR_error_string_n(ERR_get_error(), err_str, sizeof (err_str));
+		return err_str;
 	case SSH_ERR_UNEXPECTED_TRAILING_DATA:
 		return "unexpected bytes remain after decoding";
 	case SSH_ERR_SYSTEM_ERROR: