gnutls-cli: be less verbose in OCSP error messagestmp-ocsptool-updates

Previously we were reporting "No issuer found" if any certificate
in a chain could not be verified. That was confusing information
and not strictly necessary. No longer print that.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

1 files changed, 2 insertions, 1 deletions

diff --git a/src/cli.c b/src/cli.c
index 278d9addad..435f49474f 100644
--- a/src/cli.c
+++ b/src/cli.c
@@ -1832,7 +1832,8 @@ static int cert_verify_ocsp(gnutls_session_t session)
 				goto cleanup;
 			}
 		} else if (ret < 0) {
-			fprintf(stderr, "Cannot find issuer\n");
+			if (it == 0)
+				fprintf(stderr, "Cannot find issuer: %s\n", gnutls_strerror(ret));
 			goto cleanup;
 		}